Skip to main content

CVE-2026-73012

Windows Management Services Elevation of Privilege vulnerability

Microsoft

MSRC advisory September 8, 2026

Alert details

Source feed
Microsoft MSRC
CVE ID
CVE-2026-73012
Affected products
Windows Management Services Elevation of Privilege · Microsoft Windows Management Services Elevation of Privilege · Microsoft

What happened

<p>Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.</p>

What it means for your business

Windows Management Services Elevation of Privilege vulnerability (CVE-2026-73012) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.

Sources

Related briefs

Microsoft MSRC

CVE-2026-97830

Windows Internet Information Services Denial of Service vulnerability

Windows Internet Information Services Denial of Service vulnerability (CVE-2026-97830) was added to Microsoft’s security update guidance. <p>Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.</p> If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-97816

Microsoft OpenSSH for Windows Remote Code Execution vulnerability

Microsoft OpenSSH for Windows Remote Code Execution vulnerability (CVE-2026-97816) was added to Microsoft’s security update guidance. <p>Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-97815

Windows Error Reporting Remote Code Execution vulnerability

Windows Error Reporting Remote Code Execution vulnerability (CVE-2026-97815) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-97814

Windows Text Shaping Remote Code Execution vulnerability

Windows Text Shaping Remote Code Execution vulnerability (CVE-2026-97814) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.

Need help patching?

PremierePC monitors KEV alerts for managed clients and helps teams prioritize remediation before attackers do.