CVE-2026-50294
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
Windows Kernel exposes sensitive system information to unauthorized actors, allowing an unauthorized attacker to disclose information locally.
Risk Assessment
An attacker can access sensitive system data, which may facilitate further attacks or privilege escalation.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Windows Kernel
See all- CVE-2026-97803High
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-96929High
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-96913High
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-96868High
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-96317High
Use-after-free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-96312High
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-96216High
A use-after-free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-88141High
A use after free vulnerability in the Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-88139High
A use after free vulnerability in the Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-88134High
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS