CVE Catalog
CVE-2026-50480
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.24%
15th percentile - higher than 15% of all known CVEs
Summary
A heap-based buffer overflow in the Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could gain elevated privileges on the system, potentially leading to full device compromise and access to sensitive data.
Recommendation
It is recommended to immediately apply security patches provided by Microsoft and restrict access to the WPAD protocol in the network environment.
Other vulnerabilities in Windows WPAD
Original NVD description (English source)
Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.