CVE Catalog
CVE-2026-50416
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk0.45%
36th percentile - higher than 36% of all known CVEs
Summary
A vulnerability in Windows Win32K allows an authorized attacker to disclose sensitive information to an unauthorized actor locally.
Risk Assessment
The organization risks leakage of sensitive data that could be used for further attacks or privilege escalation within the system.
Recommendation
It is recommended to immediately apply the security update released by Microsoft for Windows.
Original NVD description (English source)
Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.