CVE-2026-50365

HighCVSS 8.0

Published: 14/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

37th percentile - higher than 37% of all known CVEs

Summary

Improper authentication in the Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network.

Risk Assessment

An attacker on the same local network can gain elevated privileges on the Windows system, potentially leading to system compromise and access to sensitive data.

Recommendation

Apply the security update from Microsoft that addresses this vulnerability.

Other vulnerabilities in Windows RPC API

CVE-2026-42976High
Missing authentication for a critical function in the Windows RPC API allows an authorized attacker to elevate privileges locally.

Original NVD description (English source)

Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network.