CVE-2026-50298
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Integer overflow vulnerability in Windows Spaceport.sys. Allows an unauthorized attacker to elevate privileges via a physical attack.
Risk Assessment
A physical attack could allow privilege escalation, potentially leading to full system control.
Recommendation
Install the latest Windows security updates from Microsoft.
Other vulnerabilities in Windows Spaceport.sys
See all- CVE-2026-96862High
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
- CVE-2026-83832High
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
- CVE-2026-70112High
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.
- CVE-2026-70102High
Use after free in the Windows Spaceport.sys driver. An authorized attacker can elevate privileges locally.
- CVE-2026-69934High
Integer overflow or wraparound in Windows Spaceport.sys. An authorized attacker can exploit this flaw to elevate privileges locally.
- CVE-2026-72952High
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
- CVE-2026-72942Medium
Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network.
- CVE-2026-71350Medium
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
- CVE-2026-71349Medium
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code via a physical attack.
- CVE-2026-71348Medium
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code via a physical attack.
Original NVD description (English source)
Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS