CVE-2026-50378

HighCVSS 7.8

Published: 14/07/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges locally.

Risk Assessment

An authorized attacker can elevate privileges locally, potentially leading to full system compromise or access to sensitive data, including encryption keys.

Recommendation

Install the latest Windows security update and implement proper synchronization mechanisms for shared resources in Windows Key Guard.

Other vulnerabilities in Windows Key Guard

See all

CVE-2026-66799High
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
CVE-2026-50303Medium
Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges locally.