CVE-2026-50344
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could escalate privileges, potentially leading to full system control.
Recommendation
Install the security update from Microsoft that addresses this issue.
Other vulnerabilities in Windows OLE
See all- CVE-2026-96924Critical
Windows OLE is affected by an untrusted pointer dereference vulnerability. This allows an unauthorized attacker to execute code over a network.
- CVE-2026-70138High
Heap-based buffer overflow in Windows OLE. An authorized attacker can exploit this to elevate privileges locally.
- CVE-2026-70059High
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
- CVE-2026-50686High
Windows OLE has a type confusion vulnerability that allows an unauthorized attacker to execute code remotely.
- CVE-2024-30077High
A remote code execution vulnerability in the Windows OLE component allows an attacker to execute arbitrary code in the context of the logged-on user. Exploitation requires user interaction, such as opening a specially crafted file.
- CVE-2024-21372High
Remote code execution vulnerability in Windows OLE. An attacker could exploit it to execute code on the target system.
- CVE-2023-35323High
A vulnerability in Windows OLE allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
Original NVD description (English source)
Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

