جزئیات آسیب‌پذیری

CVE-2026-20923

Microsoft Windows 10Microsoft Windows 11Microsoft Windows Server

Windows Management Services Elevation of Privilege Vulnerability

CVSS 3.1

7.8بالا

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

امتیاز	نسخه	منبع	بردار
7.8بالا	3.1	CVEProject cvelistV5 (CNA) (microsoft)	`CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C`

فروشنده	محصول	نسخه‌ها	منبع
Microsoft	Windows 10 Version 1809	10.0.17763.0 ≤ v < 10.0.17763.8276	CVEProject cvelistV5 (CNA)
Microsoft	Windows 10 Version 21H2	10.0.19044.0 ≤ v < 10.0.19044.6809	CVEProject cvelistV5 (CNA)
Microsoft	Windows 10 Version 22H2	10.0.19045.0 ≤ v < 10.0.19045.6809	CVEProject cvelistV5 (CNA)
Microsoft	Windows 11 Version 24H2	10.0.26100.0 ≤ v < 10.0.26100.7623	CVEProject cvelistV5 (CNA)
Microsoft	Windows 11 Version 25H2	10.0.26200.0 ≤ v < 10.0.26200.7623	CVEProject cvelistV5 (CNA)
Microsoft	Windows 11 version 23H2	10.0.22631.0 ≤ v < 10.0.22631.6491	CVEProject cvelistV5 (CNA)
Microsoft	Windows 11 version 23H2	10.0.22631.0 ≤ v < 10.0.22631.6491	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2019	10.0.17763.0 ≤ v < 10.0.17763.8276	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2019 (Server Core installation)	10.0.17763.0 ≤ v < 10.0.17763.8276	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2022	10.0.20348.0 ≤ v < 10.0.20348.4648	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	10.0.25398.0 ≤ v < 10.0.25398.2092	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2025	10.0.26100.0 ≤ v < 10.0.26100.32230	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2025 (Server Core installation)	10.0.26100.0 ≤ v < 10.0.26100.32230	CVEProject cvelistV5 (CNA)

۰٫۴٪

احتمال بهره‌برداری در ۳۰ روز

۳۴٫۶٪

صدک (نسبت به همه‌ی CVEها)