CVE Catalog
CVE-2026-49800
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.24%
15th percentile - higher than 15% of all known CVEs
Summary
Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could escalate privileges, potentially leading to unauthorized access to sensitive data or the system.
Recommendation
Apply the Windows security update recommended by Microsoft.
Other vulnerabilities in Windows WPAD
Original NVD description (English source)
Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.