{"id":"CVE-2026-69451","title":"Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.","summary":"Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"vendor":"Microsoft","product":"Windows 10 Version 1607","affected":["windows_10_version_1607 >= 10.0.14393.0 < 10.0.14393.9512","windows_10_version_1809 >= 10.0.17763.0 < 10.0.17763.9245","windows_10_version_21h2 >= 10.0.19044.0 < 10.0.19044.7725","windows_10_version_22h2 >= 10.0.19045.0 < 10.0.19045.7725","windows_11_version_23h2 >= 10.0.22631.0 < 10.0.22631.7582","windows_11_version_23h2 >= 10.0.22631.0 < 10.0.22631.7582","windows_11_version_24h2 >= 10.0.26100.0 < 10.0.26100.9445","windows_11_version_25h2 >= 10.0.26200.0 < 10.0.26200.9445","windows_11_version_26h1 >= 10.0.28000.0 < 10.0.28000.2954","windows_server_2012 >= 6.2.9200.0 < 6.2.9200.26349","windows_server_2012_server_core_installation >= 6.2.9200.0 < 6.2.9200.26349","windows_server_2012_r2 >= 6.3.9600.0 < 6.3.9600.23397","windows_server_2012_r2_server_core_installation >= 6.3.9600.0 < 6.3.9600.23397","windows_server_2016 >= 10.0.14393.0 < 10.0.14393.9512","windows_server_2016_server_core_installation >= 10.0.14393.0 < 10.0.14393.9512","windows_server_2019 >= 10.0.17763.0 < 10.0.17763.9245","windows_server_2019_server_core_installation >= 10.0.17763.0 < 10.0.17763.9245","windows_server_2022 >= 10.0.20348.0 < 10.0.20348.5622","windows_server_2025 >= 10.0.26100.0 < 10.0.26100.33438","windows_server_2025_server_core_installation >= 10.0.26100.0 < 10.0.26100.33438"],"published":"2026-09-08","updated":"2026-09-09","sourceUpdated":"2026-09-09T19:17:38.473","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-69451","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69451","label":"secure@microsoft.com"}],"tags":["nvd","cve.org","exploit-available"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-09T18:25:43.186496Z"},"epss":0.00668,"epssPercentile":0.50081,"exploits":{"github":1,"githubRepos":["https://github.com/fj016/CVE-2026-69451-PoC"],"checkedAt":"2026-09-21T15:30:17.908Z"},"exploitAvailable":true,"ingestedAt":"2026-09-08T19:08:49.612Z","slug":"CVE-2026-69451","body":"## Overview\n\nUse after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":51,"depthScoreParts":{"impact":39.1,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":201874,"id":"CVE-2026-69451","ts":1789399962322,"field":"exploit_available","old":"false","new":"true"},{"seq":200604,"id":"CVE-2026-69451","ts":1789397477591,"field":"exploit_available","old":"true","new":"false"},{"seq":198065,"id":"CVE-2026-69451","ts":1789384332303,"field":"exploit_available","old":"false","new":"true"},{"seq":196312,"id":"CVE-2026-69451","ts":1789383680988,"field":"exploit_available","old":"true","new":"false"},{"seq":195241,"id":"CVE-2026-69451","ts":1789380526102,"field":"exploit_available","old":"false","new":"true"},{"seq":194028,"id":"CVE-2026-69451","ts":1789378623393,"field":"exploit_available","old":"true","new":"false"},{"seq":192815,"id":"CVE-2026-69451","ts":1789376453859,"field":"exploit_available","old":"false","new":"true"},{"seq":191602,"id":"CVE-2026-69451","ts":1789373532137,"field":"exploit_available","old":"true","new":"false"},{"seq":190387,"id":"CVE-2026-69451","ts":1789369401043,"field":"exploit_available","old":"false","new":"true"},{"seq":189174,"id":"CVE-2026-69451","ts":1789368324611,"field":"exploit_available","old":"true","new":"false"},{"seq":187957,"id":"CVE-2026-69451","ts":1789365189775,"field":"exploit_available","old":"false","new":"true"},{"seq":186744,"id":"CVE-2026-69451","ts":1789363394959,"field":"exploit_available","old":"true","new":"false"},{"seq":185530,"id":"CVE-2026-69451","ts":1789361171569,"field":"exploit_available","old":"false","new":"true"},{"seq":184317,"id":"CVE-2026-69451","ts":1789358251654,"field":"exploit_available","old":"true","new":"false"},{"seq":182568,"id":"CVE-2026-69451","ts":1789354268108,"field":"exploit_available","old":"false","new":"true"},{"seq":181361,"id":"CVE-2026-69451","ts":1789353225024,"field":"exploit_available","old":"true","new":"false"},{"seq":180154,"id":"CVE-2026-69451","ts":1789350218702,"field":"exploit_available","old":"false","new":"true"},{"seq":178947,"id":"CVE-2026-69451","ts":1789348196156,"field":"exploit_available","old":"true","new":"false"},{"seq":177740,"id":"CVE-2026-69451","ts":1789346323912,"field":"exploit_available","old":"false","new":"true"},{"seq":176533,"id":"CVE-2026-69451","ts":1789343110556,"field":"exploit_available","old":"true","new":"false"},{"seq":174650,"id":"CVE-2026-69451","ts":1789334833260,"field":"exploit_available","old":"false","new":"true"},{"seq":173445,"id":"CVE-2026-69451","ts":1789333584703,"field":"exploit_available","old":"true","new":"false"},{"seq":172259,"id":"CVE-2026-69451","ts":1789331048240,"field":"exploit_available","old":"false","new":"true"},{"seq":171073,"id":"CVE-2026-69451","ts":1789328695266,"field":"exploit_available","old":"true","new":"false"},{"seq":169868,"id":"CVE-2026-69451","ts":1789327119287,"field":"exploit_available","old":"false","new":"true"},{"seq":168663,"id":"CVE-2026-69451","ts":1789323751031,"field":"exploit_available","old":"true","new":"false"},{"seq":167458,"id":"CVE-2026-69451","ts":1789319642953,"field":"exploit_available","old":"false","new":"true"},{"seq":166253,"id":"CVE-2026-69451","ts":1789318650190,"field":"exploit_available","old":"true","new":"false"},{"seq":165048,"id":"CVE-2026-69451","ts":1789315752562,"field":"exploit_available","old":"false","new":"true"},{"seq":163843,"id":"CVE-2026-69451","ts":1789313552097,"field":"exploit_available","old":"true","new":"false"},{"seq":162638,"id":"CVE-2026-69451","ts":1789311853277,"field":"exploit_available","old":"false","new":"true"},{"seq":161433,"id":"CVE-2026-69451","ts":1789308619389,"field":"exploit_available","old":"true","new":"false"},{"seq":160938,"id":"CVE-2026-69451","ts":1789304562429,"field":"exploit_available","old":"false","new":"true"},{"seq":160485,"id":"CVE-2026-69451","ts":1789304080400,"field":"exploit_available","old":"true","new":"false"},{"seq":159546,"id":"CVE-2026-69451","ts":1789300436001,"field":"exploit_available","old":"false","new":"true"},{"seq":158754,"id":"CVE-2026-69451","ts":1789299549635,"field":"exploit_available","old":"true","new":"false"},{"seq":158286,"id":"CVE-2026-69451","ts":1789296691996,"field":"exploit_available","old":"false","new":"true"},{"seq":156535,"id":"CVE-2026-69451","ts":1789294680050,"field":"exploit_available","old":"true","new":"false"},{"seq":155330,"id":"CVE-2026-69451","ts":1789292858123,"field":"exploit_available","old":"false","new":"true"},{"seq":154125,"id":"CVE-2026-69451","ts":1789289703849,"field":"exploit_available","old":"true","new":"false"},{"seq":152775,"id":"CVE-2026-69451","ts":1789281602788,"field":"exploit_available","old":"false","new":"true"},{"seq":152415,"id":"CVE-2026-69451","ts":1789281188790,"field":"exploit_available","old":"true","new":"false"},{"seq":151376,"id":"CVE-2026-69451","ts":1789277579222,"field":"exploit_available","old":"false","new":"true"},{"seq":150337,"id":"CVE-2026-69451","ts":1789276172008,"field":"exploit_available","old":"true","new":"false"},{"seq":149304,"id":"CVE-2026-69451","ts":1789273785992,"field":"exploit_available","old":"false","new":"true"},{"seq":148271,"id":"CVE-2026-69451","ts":1789271253237,"field":"exploit_available","old":"true","new":"false"},{"seq":146303,"id":"CVE-2026-69451","ts":1789269326245,"field":"exploit_available","old":"false","new":"true"},{"seq":145108,"id":"CVE-2026-69451","ts":1789266278292,"field":"exploit_available","old":"true","new":"false"},{"seq":144012,"id":"CVE-2026-69451","ts":1789262568797,"field":"exploit_available","old":"false","new":"true"},{"seq":142916,"id":"CVE-2026-69451","ts":1789261445824,"field":"exploit_available","old":"true","new":"false"}]}