CVE-2026-50311
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Improper access control vulnerability in Windows Server. Allows an authorized attacker to elevate privileges locally.
Risk Assessment
Risk involves potential privilege escalation by an authorized user, which could lead to full system compromise.
Recommendation
Apply security updates released by Microsoft for Windows Server.
Other vulnerabilities in Windows Server
See all- CVE-2026-56188Critical
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network.
- CVE-2026-56177High
A use-after-free vulnerability in Windows Server allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Improper access control in Windows Server allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS