CVE-2026-50422
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
An out-of-bounds read vulnerability in the Windows NTFS file system allows an authorized attacker to elevate privileges locally. This flaw can be exploited to gain higher-level access on the affected system.
Risk Assessment
The risk involves potential privilege escalation by an authenticated user, which could lead to full compromise of sensitive data and system control.
Recommendation
Apply the latest Microsoft security update for Windows immediately. Additionally, restrict local access to critical systems to mitigate the risk.
Other vulnerabilities in Windows NTFS
See all- CVE-2026-20840High
A heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
- CVE-2026-65784Medium
An out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
- CVE-2026-62887Medium
An out-of-bounds read vulnerability in Windows NTFS allows an authorized attacker to disclose information locally.
- CVE-2026-62880High
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-62797High
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-62796Medium
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
- CVE-2026-62793Medium
A buffer over-read vulnerability in Windows NTFS allows an authorized attacker to disclose information locally.
- CVE-2026-62700High
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-61350Medium
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
- CVE-2026-56182High
An integer overflow or wraparound vulnerability in Windows NTFS allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.