{"id":"CVE-2026-69451","title":"Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.","summary":"Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"vendor":"microsoft","product":"windows_10_1607","affected":["windows_10_1607 < 10.0.14393.9512","windows_10_1809 < 10.0.17763.9245","windows_10_21h2 < 10.0.19044.7725","windows_10_22h2 < 10.0.19045.7725","windows_11_23h2 < 10.0.22631.7582","windows_11_24h2 < 10.0.26100.9445","windows_11_25h2 < 10.0.26200.9445","windows_11_26h1 < 10.0.28000.2954","windows_server_2012","windows_server_2012 = r2","windows_server_2016 < 10.0.14393.9512","windows_server_2019 < 10.0.17763.9245","windows_server_2022 < 10.0.20348.5622","windows_server_2025 < 10.0.26100.33438"],"patched":["windows_10_1607 10.0.14393.9512","windows_10_1809 10.0.17763.9245","windows_10_21h2 10.0.19044.7725","windows_10_22h2 10.0.19045.7725","windows_11_23h2 10.0.22631.7582","windows_11_24h2 10.0.26100.9445","windows_11_25h2 10.0.26200.9445","windows_11_26h1 10.0.28000.2954","windows_server_2016 10.0.14393.9512","windows_server_2019 10.0.17763.9245","windows_server_2022 10.0.20348.5622","windows_server_2025 10.0.26100.33438"],"published":"2026-09-08","updated":"2026-09-25","sourceUpdated":"2026-09-25T13:13:38.370","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-69451","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69451","label":"secure@microsoft.com"}],"tags":["nvd","exploit-available","cve.org"],"epss":0.0057,"epssPercentile":0.46992,"exploits":{"github":1,"githubRepos":["https://github.com/fj016/CVE-2026-69451-PoC"],"checkedAt":"2026-10-27T19:09:07.235Z"},"exploitAvailable":true,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-09T18:25:43.186496Z"},"ingestedAt":"2026-09-08T19:08:49.612Z","slug":"CVE-2026-69451","body":"## Overview\n\nUse after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.\n\n## Affected\n\n- `windows_10_1607 < 10.0.14393.9512`\n- `windows_10_1809 < 10.0.17763.9245`\n- `windows_10_21h2 < 10.0.19044.7725`\n- `windows_10_22h2 < 10.0.19045.7725`\n- `windows_11_23h2 < 10.0.22631.7582`\n- `windows_11_24h2 < 10.0.26100.9445`\n- `windows_11_25h2 < 10.0.26200.9445`\n- `windows_11_26h1 < 10.0.28000.2954`\n- `windows_server_2012`\n- `windows_server_2012 = r2`\n- `windows_server_2016 < 10.0.14393.9512`\n- `windows_server_2019 < 10.0.17763.9245`\n- `windows_server_2022 < 10.0.20348.5622`\n- `windows_server_2025 < 10.0.26100.33438`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `windows_10_1607 10.0.14393.9512`\n- `windows_10_1809 10.0.17763.9245`\n- `windows_10_21h2 10.0.19044.7725`\n- `windows_10_22h2 10.0.19045.7725`\n- `windows_11_23h2 10.0.22631.7582`\n- `windows_11_24h2 10.0.26100.9445`\n- `windows_11_25h2 10.0.26200.9445`\n- `windows_11_26h1 10.0.28000.2954`\n- `windows_server_2016 10.0.14393.9512`\n- `windows_server_2019 10.0.17763.9245`\n- `windows_server_2022 10.0.20348.5622`\n- `windows_server_2025 10.0.26100.33438`","depth":"midnight","depthScore":51,"depthScoreParts":{"impact":39.1,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":201874,"id":"CVE-2026-69451","ts":1789399962322,"field":"exploit_available","old":"false","new":"true"},{"seq":200604,"id":"CVE-2026-69451","ts":1789397477591,"field":"exploit_available","old":"true","new":"false"},{"seq":198065,"id":"CVE-2026-69451","ts":1789384332303,"field":"exploit_available","old":"false","new":"true"},{"seq":196312,"id":"CVE-2026-69451","ts":1789383680988,"field":"exploit_available","old":"true","new":"false"},{"seq":195241,"id":"CVE-2026-69451","ts":1789380526102,"field":"exploit_available","old":"false","new":"true"},{"seq":194028,"id":"CVE-2026-69451","ts":1789378623393,"field":"exploit_available","old":"true","new":"false"},{"seq":192815,"id":"CVE-2026-69451","ts":1789376453859,"field":"exploit_available","old":"false","new":"true"},{"seq":191602,"id":"CVE-2026-69451","ts":1789373532137,"field":"exploit_available","old":"true","new":"false"},{"seq":190387,"id":"CVE-2026-69451","ts":1789369401043,"field":"exploit_available","old":"false","new":"true"},{"seq":189174,"id":"CVE-2026-69451","ts":1789368324611,"field":"exploit_available","old":"true","new":"false"},{"seq":187957,"id":"CVE-2026-69451","ts":1789365189775,"field":"exploit_available","old":"false","new":"true"},{"seq":186744,"id":"CVE-2026-69451","ts":1789363394959,"field":"exploit_available","old":"true","new":"false"},{"seq":185530,"id":"CVE-2026-69451","ts":1789361171569,"field":"exploit_available","old":"false","new":"true"},{"seq":184317,"id":"CVE-2026-69451","ts":1789358251654,"field":"exploit_available","old":"true","new":"false"},{"seq":182568,"id":"CVE-2026-69451","ts":1789354268108,"field":"exploit_available","old":"false","new":"true"},{"seq":181361,"id":"CVE-2026-69451","ts":1789353225024,"field":"exploit_available","old":"true","new":"false"},{"seq":180154,"id":"CVE-2026-69451","ts":1789350218702,"field":"exploit_available","old":"false","new":"true"},{"seq":178947,"id":"CVE-2026-69451","ts":1789348196156,"field":"exploit_available","old":"true","new":"false"},{"seq":177740,"id":"CVE-2026-69451","ts":1789346323912,"field":"exploit_available","old":"false","new":"true"},{"seq":176533,"id":"CVE-2026-69451","ts":1789343110556,"field":"exploit_available","old":"true","new":"false"},{"seq":174650,"id":"CVE-2026-69451","ts":1789334833260,"field":"exploit_available","old":"false","new":"true"},{"seq":173445,"id":"CVE-2026-69451","ts":1789333584703,"field":"exploit_available","old":"true","new":"false"},{"seq":172259,"id":"CVE-2026-69451","ts":1789331048240,"field":"exploit_available","old":"false","new":"true"},{"seq":171073,"id":"CVE-2026-69451","ts":1789328695266,"field":"exploit_available","old":"true","new":"false"},{"seq":169868,"id":"CVE-2026-69451","ts":1789327119287,"field":"exploit_available","old":"false","new":"true"},{"seq":168663,"id":"CVE-2026-69451","ts":1789323751031,"field":"exploit_available","old":"true","new":"false"},{"seq":167458,"id":"CVE-2026-69451","ts":1789319642953,"field":"exploit_available","old":"false","new":"true"},{"seq":166253,"id":"CVE-2026-69451","ts":1789318650190,"field":"exploit_available","old":"true","new":"false"},{"seq":165048,"id":"CVE-2026-69451","ts":1789315752562,"field":"exploit_available","old":"false","new":"true"},{"seq":163843,"id":"CVE-2026-69451","ts":1789313552097,"field":"exploit_available","old":"true","new":"false"},{"seq":162638,"id":"CVE-2026-69451","ts":1789311853277,"field":"exploit_available","old":"false","new":"true"},{"seq":161433,"id":"CVE-2026-69451","ts":1789308619389,"field":"exploit_available","old":"true","new":"false"},{"seq":160938,"id":"CVE-2026-69451","ts":1789304562429,"field":"exploit_available","old":"false","new":"true"},{"seq":160485,"id":"CVE-2026-69451","ts":1789304080400,"field":"exploit_available","old":"true","new":"false"},{"seq":159546,"id":"CVE-2026-69451","ts":1789300436001,"field":"exploit_available","old":"false","new":"true"},{"seq":158754,"id":"CVE-2026-69451","ts":1789299549635,"field":"exploit_available","old":"true","new":"false"},{"seq":158286,"id":"CVE-2026-69451","ts":1789296691996,"field":"exploit_available","old":"false","new":"true"},{"seq":156535,"id":"CVE-2026-69451","ts":1789294680050,"field":"exploit_available","old":"true","new":"false"},{"seq":155330,"id":"CVE-2026-69451","ts":1789292858123,"field":"exploit_available","old":"false","new":"true"},{"seq":154125,"id":"CVE-2026-69451","ts":1789289703849,"field":"exploit_available","old":"true","new":"false"},{"seq":152775,"id":"CVE-2026-69451","ts":1789281602788,"field":"exploit_available","old":"false","new":"true"},{"seq":152415,"id":"CVE-2026-69451","ts":1789281188790,"field":"exploit_available","old":"true","new":"false"},{"seq":151376,"id":"CVE-2026-69451","ts":1789277579222,"field":"exploit_available","old":"false","new":"true"},{"seq":150337,"id":"CVE-2026-69451","ts":1789276172008,"field":"exploit_available","old":"true","new":"false"},{"seq":149304,"id":"CVE-2026-69451","ts":1789273785992,"field":"exploit_available","old":"false","new":"true"},{"seq":148271,"id":"CVE-2026-69451","ts":1789271253237,"field":"exploit_available","old":"true","new":"false"},{"seq":146303,"id":"CVE-2026-69451","ts":1789269326245,"field":"exploit_available","old":"false","new":"true"},{"seq":145108,"id":"CVE-2026-69451","ts":1789266278292,"field":"exploit_available","old":"true","new":"false"},{"seq":144012,"id":"CVE-2026-69451","ts":1789262568797,"field":"exploit_available","old":"false","new":"true"},{"seq":142916,"id":"CVE-2026-69451","ts":1789261445824,"field":"exploit_available","old":"true","new":"false"}]}