CVE-2026-42974

{"id": "CVE-2026-42974", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "secure@microsoft.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}]}, "published": "2026-06-09T17:17:13.180", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42974", "tags": ["Vendor Advisory"], "source": "secure@microsoft.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "secure@microsoft.com", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code over a network."}], "lastModified": "2026-06-10T19:53:00.330", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "92508776-88BE-4872-99DB-1F690F71ADEF", "versionEndExcluding": "10.0.22631.7219"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "410079AC-180E-4D7F-B7F6-784E36FEA036", "versionEndExcluding": "10.0.22631.7219"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "32DB4863-6880-40B4-8EC1-9E0F40E81D7F", "versionEndExcluding": "10.0.26100.8655"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "E691C9E5-5271-436D-A7FD-C25BEA4D447D", "versionEndExcluding": "10.0.26100.8655"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "1D3DEE4A-9959-4716-BC39-35660AC22BC4", "versionEndExcluding": "10.0.26200.8655"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "1000C085-A5D7-4027-B9C1-6AE7DA468FB7", "versionEndExcluding": "10.0.26200.8655"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "9C7AD7ED-307B-40B9-B706-45FB178C36D8", "versionEndExcluding": "10.0.28000.2269"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "8967AF79-CAD0-4F87-85A5-95D031C9FEFA", "versionEndExcluding": "10.0.28000.2269"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27363D97-D4A9-4709-9854-F78F7EBCFB27", "versionEndExcluding": "10.0.20348.5256"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "E127A6E6-C261-4039-8A13-A2FAC4606573", "versionEndExcluding": "10.0.26100.32995"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}