CVE Catalog
CVE-2026-50425
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.24%
15th percentile - higher than 15% of all known CVEs
Summary
Windows Internal System User Profile has a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized attacker can gain higher privileges on the system, potentially leading to full system compromise.
Recommendation
Install the appropriate security update from Microsoft.
Other vulnerabilities in Windows Internal System User Profile
Original NVD description (English source)
Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS