CVE-2026-10590: Medium severity Microsoft Windows vulnerability
Published Jul 16, 2026
·Updated
A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler.
Affected Software
1 affected component
Microsoft Windows
Event History
Jul 16, 2026
CVE Published
via MITRE·04:50 PM
Data Sourced
via MITRE·04:50 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2026-10590?
The severity of CVE-2026-10590 is rated as medium with a score of 4.4.
2
What type of vulnerability is CVE-2026-10590?
CVE-2026-10590 is a missing authentication vulnerability that may be exploited by a local privileged attacker.
3
How can an attacker exploit CVE-2026-10590?
An attacker can exploit CVE-2026-10590 by using WMI commands to trigger a System Management Interrupt handler.
4
What is the potential impact of CVE-2026-10590?
The potential impact of CVE-2026-10590 includes unauthorized access and manipulation of system resources by a local privileged attacker.
5
How do I fix CVE-2026-10590?
To fix CVE-2026-10590, ensure that your system has the latest security updates applied from the vendor.