CVE-2026-50452
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
A race condition in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An unauthenticated attacker could remotely elevate privileges, posing a risk of network-based system takeover.
Recommendation
Apply security updates for Windows Runtime to fix the synchronization issue.
Other vulnerabilities in Windows Runtime
See all- CVE-2026-58527High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.
- CVE-2026-54125High
Race condition vulnerability in Windows Runtime. An authenticated attacker can exploit concurrent execution with improper synchronization to elevate privileges locally.
- CVE-2026-50503High
A race condition due to improper synchronization of shared resources in Windows Runtime allows an authorized attacker to elevate privileges locally.
- CVE-2026-50486High
Use-after-free vulnerability in Windows Runtime allows an authorized attacker to elevate privileges locally.
- CVE-2026-50460High
A race condition vulnerability in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-50457High
A use-after-free vulnerability in Windows Runtime allows an authorized attacker to elevate privileges locally.
- CVE-2026-50449High
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
- CVE-2026-50413High
Use-after-free vulnerability in Windows Runtime allows an authorized attacker to elevate privileges locally.
- CVE-2026-50410High
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
- CVE-2026-50403High
A race condition in Windows Runtime allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.