CVEvulnerability

CVE-2026-40145

7.1 HIGH Published 2026-08-17 Modified 2026-10-23 Official page ↗
Status
Awaiting Analysis
Published
2026-08-17
Last modified
2026-10-23
Assigner
13061848-ea10-403d-bd75-c83a022c2891
CVSS 4.0 (13061848-ea10-403d-bd75-c83a022c2891)
7.1 HIGH — CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses
CWE-1220

Description

A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended.

Related

Weakness · CWE (1)

  • CWE-1220 Insufficient Granularity of Access Control weakness

References