← CVE Radar
CVE-2026-50378Windows Key Guard Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges locally.
7.8 HIGHEPSS 0.21%Not in KEVNVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 3.1microsoft (CNA) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 7.8 | HIGH | 3.1microsoft (CNA) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
| 7.0 | HIGH | 3.1NVD | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2026-50378
- Status
- Analyzed
- Assigner (CNA)
- microsoft
- Published
- Jul 14, 2026
- Last modified
- 2026-11-01 17:34 UTC
- Weaknesses
- CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected Products
As published by the CNA in the CVE record.
MicrosoftWindows 10 Version 18091 version range
- 10.0.17763.0 before 10.0.17763.9020
MicrosoftWindows 10 Version 21H21 version range
- 10.0.19044.0 before 10.0.19044.7548
MicrosoftWindows 10 Version 22H21 version range
- 10.0.19045.0 before 10.0.19045.7548
MicrosoftWindows 11 Version 24H21 version range
- 10.0.26100.0 before 10.0.26100.8875
MicrosoftWindows 11 Version 25H21 version range
- 10.0.26200.0 before 10.0.26200.8875
MicrosoftWindows 11 version 26H11 version range
- 10.0.28000.0 before 10.0.28000.2525
MicrosoftWindows Server 20191 version range
- 10.0.17763.0 before 10.0.17763.9020
MicrosoftWindows Server 2019 (Server Core installation)1 version range
- 10.0.17763.0 before 10.0.17763.9020
MicrosoftWindows Server 20221 version range
- 10.0.20348.0 before 10.0.20348.5386
MicrosoftWindows Server 20251 version range
- 10.0.26100.0 before 10.0.26100.33158
MicrosoftWindows Server 2025 (Server Core installation)1 version range
- 10.0.26100.0 before 10.0.26100.33158