Skip to content
OpenAdvisories
High · 7.3 CVE-2026-40144 EUVD-2026-60260GHSA-5qm2-5273-p7p4

Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments)

Published Aug 17, 2026 · Updated Aug 17, 2026 · Assigned by BT

Description

A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management (Windows deployments) prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds.

Affected products

VendorProductAffectedFixed
BeyondTrust Endpoint Privilege Management (Windows deployments) < 26.1.2 26.1.2

References