CVE-2026-50406
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A use-after-free vulnerability in the Windows Backup Engine allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized attacker can gain higher privileges, potentially leading to compromise of backup data confidentiality and integrity.
Recommendation
Install the latest Windows security updates from Microsoft.
Other vulnerabilities in Windows Backup Engine
See all- CVE-2026-62908High
Concurrent execution using shared resource with improper synchronization (race condition) in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
- CVE-2026-58598High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally.