CVE-2026-40144
Received Received - Intake

Memory Corruption in BeyondTrust Endpoint Privilege Management

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: BeyondTrust

Description
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management (Windows deployments) prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-17
Last Modified
2026-08-17
Generated
2026-08-17
AI Q&A
2026-08-17
EPSS Evaluated
N/A
NVD
CVE-2026-40144
EUVD
EUVD-2026-60260

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
beyondtrust endpoint_privilege_management to 26.1.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a memory-corruption vulnerability in a kernel-mode component of BeyondTrust Endpoint Privilege Management for Windows. It occurs due to insufficient input validation, which can lead to memory being accessed outside its intended bounds. The issue affects versions prior to 26.1.2.

Detection Guidance

Detection of this vulnerability requires checking the installed version of BeyondTrust Endpoint Privilege Management. If the version is prior to 26.1.2, the system is vulnerable. No specific commands are provided in the context, but you can verify the version through the software's interface or registry checks.

Impact Analysis

An attacker could exploit this to execute arbitrary code, escalate privileges, or cause system instability. Since it affects a kernel-mode component, it may allow deeper system compromise. Users should update to version 26.1.2 or later to mitigate risks.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a technical memory-corruption issue in a specific software component. Compliance impacts would depend on how the affected software is used in a system handling regulated data.

Mitigation Strategies

Update BeyondTrust Endpoint Privilege Management for Windows to version 26.1.2 or later to address the memory-corruption vulnerability in the kernel-mode component.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-40144. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart