CVE-2026-50670 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50489

CVE-2026-50489 is a heap-based buffer overflow in Windows Win32K that allows an authorized, locally authenticated attacker to escalate privileges. The root cause is a memory corruption in the Win32K subsystem that leads to code execution with SYSTEM rights. The CVE entry is supported by multiple ...

CVE-2026-50489 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50489 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50416 Win32k Information Disclosure Vulnerability

...

CVE-2026-50416

CVE-2026-50416 is a Win32K information disclosure vulnerability in Windows. The issue allows local disclosure of sensitive data to an attacker with local access (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N, Base score 3.3). Microsoft has released updates to address this vulnerability; apply th...

CVE-2026-50416 Win32k Information Disclosure Vulnerability

...

CVE-2026-50325 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50325 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50325

Technical details (affected versions, root cause, remediation) are not provided in the supplied documents; monitor for updates.

CVE-2026-50297

CVE-2026-50297 is a Windows Win32K local privilege escalation due to improper access control. The vulnerable component is Win32K; the condition allows an authorized attacker to elevate privileges locally. Base impact is high (C, I, A) with local attack vector and no user interaction required beyo...

CVE-2026-50297 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-49805

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-49805

CVE-2026-49805 concerns Windows: an improper access control in the Win32K subsystem could allow a locally authenticated attacker to elevate privileges. Affected software is described as Windows Win32K; the root cause cited is access-control issues within that component. The documents provide the ...

CVE-2026-49805 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-49805 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-54114

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-54114 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-54114 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-54114

CVE-2026-54114 is a Windows Win32K use-after-free that enables a local privilege elevation for an authenticated user. The vulnerability affects Win32k functionality (Win32k.sys context) and is triggered by an improper handling of freed objects, allowing an attacker to escalate to SYSTEM level on ...