Reported by 2 outlets
BeyondTrust Endpoint Privilege Management Flaws Enable Local Privilege Escalation
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 2.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.58 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
update from cyberpress.org
BeyondTrust EPM Flaw Lets Standard Windows Users Execute Code in Kernel Mode
cyberpress.org · 55d ago · August 19th, 2026
BeyondTrust has disclosed two high-severity vulnerabilities in its Endpoint Privilege Management (EPM) product for Windows that could enable local privilege escalation and anti-tamper bypasses on affected endpoints. Tracked under advisory BT26-04, the flaws affect all versions of BeyondTrust Endpoint Privilege Management (Windows Deployment) released before version 26.1.2. The company issued the advisory on August 17, 2026, and said both issues were discovered internally during ongoing security assessments using frontier AI models and proprietary testing harnesses. BeyondTrust EPM Flaw The most severe vulnerability, tracked as CVE-2026-40144, carries a CVSS v4 score of 7.3 and stems from an out-of-bounds read issue in a kernel-mode component of the EPM Windows agent. BeyondTrust classified the vulnerability under CWE-125, which covers improper memory access beyond the intended bounds of a buffer or memory region. According to the advisory, insufficient validation of input processed by the affected kernel component could allow a local user with standard, non-administrative permissions to corrupt kernel memory. A successful attack could result in arbitrary code execution in kernel mode, giving an attacker the highest level of control over the Windows operating system. The CVSS vector for CVE-2026-40144 indicates that exploitation requires local access and low privileges, but does not require user interaction. Kernel-level code execution could enable attackers to bypass security
-
update from gbhackers.com
BeyondTrust Endpoint Privilege Management Flaws Enable Local Privilege Escalation
gbhackers.com · 55d ago · August 19th, 2026
The company has released […] The post BeyondTrust Endpoint Privilege Management Flaws Enable Local Privilege Escalation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .