جزئیات آسیب‌پذیری

CVE-2026-42981

Microsoft Windows 11Microsoft Windows Server

Windows Performance Monitor Remote Code Execution Vulnerability

CVSS 3.1

8.1بالا

Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.

امتیاز	نسخه	منبع	بردار
8.1بالا	3.1	CVEProject cvelistV5 (CNA) (microsoft)	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C`

فروشنده	محصول	نسخه‌ها	منبع
Microsoft	Windows 11 Version 24H2	10.0.26100.0 ≤ v < 10.0.26100.8655	CVEProject cvelistV5 (CNA)
Microsoft	Windows 11 Version 25H2	10.0.26200.0 ≤ v < 10.0.26200.8655	CVEProject cvelistV5 (CNA)
Microsoft	Windows 11 version 23H2	10.0.22631.0 ≤ v < 10.0.22631.7219	CVEProject cvelistV5 (CNA)
Microsoft	Windows 11 version 23H2	10.0.22631.0 ≤ v < 10.0.22631.7219	CVEProject cvelistV5 (CNA)
Microsoft	Windows 11 version 26H1	10.0.28000.0 ≤ v < 10.0.28000.2269	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2022	10.0.20348.0 ≤ v < 10.0.20348.5256	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2025	10.0.26100.0 ≤ v < 10.0.26100.32995	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2025 (Server Core installation)	10.0.26100.0 ≤ v < 10.0.26100.32995	CVEProject cvelistV5 (CNA)

۰٫۶۴٪

احتمال بهره‌برداری در ۳۰ روز

۵۰٫۹٪

صدک (نسبت به همه‌ی CVEها)