CVE-2026-50390Windows Kernel Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.8 HIGHEPSS 0.27%Not in KEVNVD: Analyzed

Last updated: 2026-11-01 17:34 UTC

OverviewCVSS details

7.8HIGHCVSS 3.1

Windows 10 Version 1607 (Microsoft)

0.27%chance of exploitation in 30 days

Higher than 20.43% of CVEs

7.8High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.0High

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7.0High

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Overview

Score	Severity	Version	Vector String
7.8	HIGH	3.1NVD	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.0	HIGH	3.1microsoft (CNA)	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
7.0	HIGH	3.1microsoft (CNA)	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CVE ID: CVE-2026-50390
Status: Analyzed
Assigner (CNA): microsoft
Published: Jul 14, 2026
Last modified: 2026-11-01 17:34 UTC
Weaknesses: CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')

Refreshed hourly from the sources above. Last fetched 2026-11-09 10:52 UTC.