CVE-2026-50377: Windows Kernel Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
Other sources
Windows Kernel Elevation of Privilege Vulnerability
— Microsoft
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
Windows Kernel Elevation of Privilege Vulnerability
— Microsoft
An attacker must already be authorized to access the affected Windows system and must exploit it locally. The provided data does not indicate that remote, unauthenticated attackers can exploit it directly.
Successful exploitation can elevate the attacker’s privileges on the local system. The listed impact indicates high confidentiality impact, while integrity and availability impacts are not listed.
Prioritize affected Windows 10, Windows 11, and Windows Server systems where lower-privileged users, interactive users, or untrusted local workloads can obtain authorized access. The affected server releases listed are Windows Server 2016, 2019, 2022, and 2025.
Yes. A patch is available for this vulnerability.