CVE-2026-50315

HighCVSS 7.8

Published: 14/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile - higher than 23% of all known CVEs

Summary

The Windows Image Acquisition component contains a null pointer dereference vulnerability that allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker with limited access can cause a system crash or elevate privileges, potentially leading to full compromise.

Recommendation

Install the latest Windows security updates. Restrict system access to trusted users only.

Other vulnerabilities in Windows Image Acquisition

CVE-2023-35342High
A vulnerability in Windows Image Acquisition allows for elevation of privilege, potentially leading to unauthorized access to the system.

Original NVD description (English source)

Null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.