CVE-2026-50334

MediumCVSS 5.5

Published: 14/07/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

28th percentile - higher than 28% of all known CVEs

Summary

A vulnerability in Windows Notification allows an authorized attacker to disclose sensitive information locally. The issue stems from improper access control to data.

Risk Assessment

The organization is at risk of leaking confidential data stored locally, which may lead to security policy violations.

Recommendation

It is recommended to immediately apply the security update provided by the vendor for Windows.

Other vulnerabilities in Windows Notification

CVE-2026-50337High
Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally.

Original NVD description (English source)

Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally.