CVE-2026-50488
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
A command injection vulnerability in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could gain higher privileges on the system, potentially leading to full machine compromise.
Recommendation
Install the latest security updates from Microsoft for Windows.
Other vulnerabilities in Windows Clipboard User Service
See all- CVE-2026-85912High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85863High
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85861High
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83893Medium
A vulnerability in the Windows Clipboard User Service allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.
- CVE-2026-83764Medium
Incorrect authorization in the Windows Clipboard User Service allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS