CVE-2026-50487
HighCVSS 8.1Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
A use-after-free vulnerability in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker can gain elevated privileges on the system, potentially leading to full compromise.
Recommendation
Install the latest security updates for Windows from Microsoft.
Other vulnerabilities in Microsoft Windows DNS
See all- CVE-2026-41096Critical
A heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-50495Medium
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
- CVE-2026-50465High
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
- CVE-2026-50295Medium
Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally.
- CVE-2026-49174Medium
Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
- CVE-2026-41108High
Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network.