CVE-2026-50392
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
A Use-After-Free vulnerability in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could exploit this vulnerability to gain elevated privileges, potentially leading to full system compromise.
Recommendation
Apply the security update provided by the vendor immediately and restrict local access to trusted users.
Other vulnerabilities in Windows Secure Kernel Mode
See all- CVE-2026-70026High
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-85921High
A double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-83939High
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-69846High
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-69501High
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-42982High
Vulnerability in Windows Secure Kernel Mode due to improper validation of input consistency. An authenticated attacker can elevate privileges locally.
- CVE-2021-33744Medium
A vulnerability in Windows Secure Kernel Mode allows a security feature bypass. An attacker could exploit this flaw to bypass kernel protection mechanisms.
Original NVD description (English source)
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS