CVE-2026-50489

CVE-2026-50489 is a heap-based buffer overflow in Windows Win32K that allows an authorized, locally authenticated attacker to escalate privileges. The root cause is a memory corruption in the Win32K subsystem that leads to code execution with SYSTEM rights. The CVE entry is supported by multiple ...

CVE-2026-50489 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50489 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50499

CVE-2026-50499 is a Windows Print Spooler vulnerability described as a heap-based buffer overflow in Print Spooler Components that enables a locally authenticated attacker to elevate privileges. The NVD/CIRCL entries corroborate a local-exploit path with a high impact (C/H/I/A: High) and a CVSSv3...

CVE-2026-50499 Windows Print Spooler Elevation of Privilege Vulnerability

...

CVE-2026-50499 Windows Print Spooler Elevation of Privilege Vulnerability

...

CVE-2026-50500

CVE-2026-50500 is a Windows Netlogon use-after-free vulnerability allowing an authenticated attacker to elevate privileges over the network. The affected component is Windows Netlogon; impact is elevation of privileges (CVE-2026-50500, CVSS 7.5). Connected sources reference Microsoft advisories a...

CVE-2026-50488

CVE-2026-50488 affects Windows Clipboard User Service and is caused by improper neutralization of special elements in a command, enabling local privilege escalation for an authorized attacker. The CVSS v3.1 vector indicates local access, low attack complexity and privileges, with high impact to c...

CVE-2026-50500 Windows Netlogon Elevation of Privilege Vulnerability

...

CVE-2026-50488 Clipboard User Service Elevation of Privilege Vulnerability

...

CVE-2026-50488 Clipboard User Service Elevation of Privilege Vulnerability

...

CVE-2026-50500 Windows Netlogon Elevation of Privilege Vulnerability

...

CVE-2026-50487 Windows DNS Client Elevation of Privilege Vulnerability

...

CVE-2026-50486

CVE-2026-50486 is a Windows Runtime use-after-free vulnerability that enables a local, authenticated attacker with low privileges and no user interaction to elevate privileges. The issue is described as a Windows Runtime elevation of privileges vulnerability. Public details in connected sources i...

CVE-2026-50487

CVE-2026-50487 is a Windows DNS Client use-after-free memory corruption vulnerability in the Windows DNS component that allows a network-based attacker to elevate privileges without user interaction. Affected product: Microsoft Windows DNS Client. Root cause: use-after-free in DNS handling leadin...

CVE-2026-50486 Windows Runtime Elevation of Privilege Vulnerability

...

CVE-2026-50487 Windows DNS Client Elevation of Privilege Vulnerability

...

CVE-2026-50486 Windows Runtime Elevation of Privilege Vulnerability

...

CVE-2026-50484 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-50484

CVE-2026-50484 is a Windows Kernel heap-based buffer overflow that enables local privilege escalation for an authenticated attacker. Public docs confirm the vulnerability and affected component as the Windows Kernel, with the impact described as local privilege elevation. Microsoft and MSRC have ...