EUVD-2026-60260
GHSA-5qm2-5273-p7p4
Severity by source
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local kernel-mode driver reachable only by authenticated low-privileged users under specific conditions; scope unchanged as impact is confined to the single endpoint with no cross-system propagation.
Primary rating from Vendor (13061848-ea10-403d-bd75-c83a022c2891).
CVSS VectorVendor: 13061848-ea10-403d-bd75-c83a022c2891
Lifecycle Timeline
3DescriptionCVE.org
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management (Windows deployments) prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds.
AnalysisAI
Memory corruption in the kernel-mode driver component of BeyondTrust Endpoint Privilege Management for Windows (all versions prior to 26.1.2) allows a low-privileged local user to trigger an out-of-bounds read, potentially disclosing kernel memory contents or corrupting system state. The flaw is rooted in insufficient input validation within a Ring 0 component - the most privileged execution layer on Windows - amplifying the potential impact of what would otherwise be a constrained user-level action. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated local session with at least low-privileged access (PR:L per CVSS 4.0) on a Windows system where BeyondTrust Endpoint Privilege Management prior to version 26.1.2 is installed and its kernel-mode driver is loaded. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 7.3 with vector AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H accurately conveys substantial impact within the vulnerable system, but the local attack vector and high attack complexity are meaningful constraints that lower immediate exploitation likelihood. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade BeyondTrust Endpoint Privilege Management for Windows to version 26.1.2 or later, as directed by the vendor advisory at https://www.beyondtrust.com/trust-center/security-advisories/bt26-04. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all systems running BeyondTrust Endpoint Privilege Management and identify those running versions prior to 26.1.2. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today