CVE-2026-50686
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
Windows OLE has a type confusion vulnerability that allows an unauthorized attacker to execute code remotely.
Risk Assessment
An unauthorized attacker can exploit this vulnerability to execute arbitrary code in the context of the Windows system, potentially leading to full system compromise.
Recommendation
Apply the appropriate security patch from Microsoft for Windows OLE.
Other vulnerabilities in Windows OLE
See all- CVE-2026-50344High
Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.
- CVE-2024-30077High
A remote code execution vulnerability in the Windows OLE component allows an attacker to execute arbitrary code in the context of the logged-on user. Exploitation requires user interaction, such as opening a specially crafted file.
- CVE-2024-21372High
Remote code execution vulnerability in Windows OLE. An attacker could exploit it to execute code on the target system.
- CVE-2023-35323High
A vulnerability in Windows OLE allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
Original NVD description (English source)
Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network.