CVE-2026-50414
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
A race condition vulnerability in Windows Media allows an authorized attacker to elevate privileges over the network.
Risk Assessment
An authorized attacker can gain higher privileges on the system, enabling access to sensitive data and further attacks.
Recommendation
Install the latest Windows security updates from Microsoft. Monitor the system for unusual activity.
Other vulnerabilities in Windows Media
See all- CVE-2026-96071High
A heap-based buffer overflow vulnerability in Windows Media allows an unauthenticated attacker to execute code remotely over a network. The flaw occurs due to buffer overflow on the heap during media processing.
- CVE-2026-83650High
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
- CVE-2026-83641High
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
- CVE-2026-69891High
Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
- CVE-2026-58542High
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
- CVE-2026-50677High
Use-after-free vulnerability in Windows Media allows an authorized attacker to elevate privileges locally.
- CVE-2026-50676High
Race condition vulnerability in Windows Media allows an authorized attacker to elevate privileges locally.
- CVE-2026-50655High
Windows Media contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.
- CVE-2026-50433High
Use-After-Free vulnerability in Windows Media allows an authorized attacker to elevate privileges locally.
- CVE-2026-50415Medium
An exposure of sensitive information to an unauthorized actor exists in Windows Media. An unauthorized attacker can exploit this to disclose information remotely over the network.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

