Do Son 
TL;DR
BeyondTrust patched two high-severity flaws in Endpoint Privilege Management for Windows. This BeyondTrust vulnerability pair can lead to local privilege escalation. The company found both through its own internal research.
- Product: BeyondTrust (2 products)
- Vulnerabilities: 2 flaws (CVE-2026-40144, CVE-2026-40145)
- Highest severity: 7.3 (High · CVSSv4)
- Worst impact: Memory corruption in
- Status: No confirmed exploitation yet; patches available
- Action: Update to 26.1.2 now
| CVE | CVSS (CVSSv4) | Type | Fixed in | Status |
|---|---|---|---|---|
| CVE-2026-40144 | 7.3 | Memory corruption in | 26.1.2 | Not exploited |
| CVE-2026-40145 | 7.1 | Control protections bypass in support utility | 26.1.2 | Not exploited |
Why it matters
Endpoint Privilege Management enforces least privilege on endpoints. A flaw there can undo that control. The more severe BeyondTrust vulnerability lets a standard user gain higher rights. That outcome hands an attacker a foothold for deeper access.
How the attacks work
The top flaw, CVE-2026-40144, is a kernel-mode memory bug. It stems from an out-of-bounds read. As BeyondTrust states, weak input validation “may result in memory being accessed outside its intended bounds.” A local, non-admin user could corrupt kernel memory and run code in kernel mode.
The second flaw, CVE-2026-40145, weakens anti-tamper protection. It requires an attacker who already holds elevated privileges. Both bugs need local access to the endpoint.
Affected versions
The flaws affect all Endpoint Privilege Management (Windows Deployment) versions before 26.1.2. BeyondTrust states it found “no evidence of exploitation of either issue prior to remediation.”
Patch and mitigation steps
Upgrade affected endpoints to version 26.1.2 or later. BeyondTrust urges customers to update at the earliest opportunity, as noted in the BT26-04 security advisory. Since both flaws need local access, tight endpoint hygiene lowers the risk further.
Support Our Threat Intelligence
If you find our CVE report and cybersecurity news helpful, consider supporting our work.
Buy Me a Coffee
PayPal
