CVE-2026-58544
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Use-After-Free vulnerability in Windows Management Services. Allows an authorized attacker to elevate privileges locally.
Risk Assessment
Risk involves potential privilege escalation by an authorized user, which could lead to full system compromise.
Recommendation
Apply security updates released by Microsoft for Windows.
Other vulnerabilities in Windows Management Services
See all- CVE-2026-70348Medium
Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service locally.
- CVE-2026-20924High
A use-after-free vulnerability in Windows Management Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-20923High
A use-after-free vulnerability in Windows Management Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-20918High
A race condition exists in Windows Management Services due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-20877High
A use-after-free vulnerability exists in Windows Management Services. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-20874High
A race condition exists in Windows Management Services due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-20873High
A race condition exists in Windows Management Services due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-20867High
A race condition exists in Windows Management Services due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-20866High
A race condition exists in Windows Management Services due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-20865High
A use-after-free vulnerability in Windows Management Services allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.