CVE-2026-69349
MediumCVSS 5.7Exploitation Probability (EPSS)
Elevated risk58th percentile - higher than 58% of all known CVEs
Summary
A use of uninitialized resource vulnerability in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.
Risk Assessment
The risk involves potential remote information leakage, which could compromise data confidentiality in a networked environment.
Recommendation
Update Windows and monitor network traffic related to WMI.
Other vulnerabilities in Windows Management Instrumentation
See all- CVE-2026-96856High
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
- CVE-2026-96851Medium
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
- CVE-2026-88091High
Deserialization of untrusted data vulnerability in Windows Management Instrumentation. An authorized attacker can elevate privileges locally.
- CVE-2026-85852Medium
An out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
- CVE-2026-85362High
Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
- CVE-2026-83783High
A heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
- CVE-2026-83724High
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
- CVE-2026-77905High
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
- CVE-2026-70582Medium
Race condition in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
- CVE-2026-69451High
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS