CVE-2026-50500
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
A Use-After-Free vulnerability in Windows Netlogon allows an authorized attacker to remotely elevate privileges over a network. The issue stems from improper memory management during authentication request processing.
Risk Assessment
An attacker could gain elevated privileges within a Windows domain, potentially leading to full compromise of workstations and servers in the organization's network.
Recommendation
Apply the Microsoft security update for the affected Windows version immediately. Restrict network trust for unauthorized devices.
Other vulnerabilities in Windows Netlogon
See all- CVE-2026-72982Critical
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-41089Critical
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
- CVE-2026-70090Medium
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.
- CVE-2026-70072Medium
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.
- CVE-2026-70025Medium
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
- CVE-2026-62759High
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
Original NVD description (English source)
Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS