CVE-2010-4588

CVE-2010-4588 describes a critical remote code execution vulnerability in the WBEMSingleView.ocx ActiveX control within Microsoft WMI Administrative Tools 1.1 and earlier. This flaw allows remote attackers to execute arbitrary code by supplying a crafted argument to the ReleaseContext method, potentially through an untrusted pointer dereference. With a CVSS score of 9.3 (Critical) and a FAUCET Risk Score of 99/100, this vulnerability poses a significant threat due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, public exploit code exists on ExploitDB, indicating its potential for exploitation. Despite its age, the high EPSS score suggests a higher-than-average probability of exploitation compared to most CVEs.