VULNERABILITY INTELLIGENCE
CVE-2026-15380
EPSS probability0.17%
CISA KEVNot currently listed
Published2026-07-17
Last modified2026-10-24
Description
A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required (ITMS 8.7.3)
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-269