CVE-2026-50295
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally.
Risk Assessment
The risk is that an authorized user can locally bypass a DNS security feature, potentially leading to privilege escalation or system integrity compromise.
Recommendation
Apply the appropriate security update from Microsoft as soon as it becomes available.
Other vulnerabilities in Microsoft Windows DNS
See all- CVE-2026-41096Critical
A heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-50495Medium
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
- CVE-2026-50487High
A use-after-free vulnerability in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-50465High
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
- CVE-2026-49174Medium
Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
- CVE-2026-41108High
Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally.