CVE-2026-50391
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user could modify group policy settings, leading to privilege escalation and system compromise.
Recommendation
Install the latest security updates for Windows Group Policy.
Other vulnerabilities in Windows Group Policy
See all- CVE-2023-36889Medium
A vulnerability in the Windows Group Policy security feature allows for security mechanism bypass. This could lead to unauthorized access to system resources.
- CVE-2022-41086Medium
Windows Group Policy Elevation of Privilege Vulnerability.
- CVE-2022-37992High
A vulnerability in Windows Group Policy allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Original NVD description (English source)
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.