CVE-2026-77905
HighCVSS 7.0Summary
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized attacker could elevate privileges, potentially gaining full control of the system and access to sensitive data.
Recommendation
Apply Windows security updates available through monthly patches.
Other vulnerabilities in Windows Management Instrumentation
See all- CVE-2026-70582Medium
Race condition in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
- CVE-2026-69451High
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69349Medium
A use of uninitialized resource vulnerability in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.
- CVE-2026-62738Medium
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.