CVE-2026-50337
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker can gain elevated privileges, leading to full system compromise.
Recommendation
Install the latest Windows security updates released by Microsoft.
Other vulnerabilities in Windows Notification
See all- CVE-2026-83854Medium
Improper access control in Windows Notification allows an authorized attacker to disclose information locally.
- CVE-2026-69648High
Use-after-free in Windows Notification allows an authorized attacker to elevate privileges locally.
- CVE-2026-50334Medium
A vulnerability in Windows Notification allows an authorized attacker to disclose sensitive information locally. The issue stems from improper access control to data.
Original NVD description (English source)
Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS