CVE-2026-50418

MEDIUM

MEDIUM Priority: 0.01 BB Relevance: 45/100

Published: 2026-07-14 Modified: 2026-10-28 First seen: 2026-10-29 Status: active

Low Complexity No Auth No Interaction

AV: Local

AC: Low

PR: None

UI: None

S: Unchanged

C: Low

I: Low

A: None

Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally.

Vendor	Product	Version
Microsoft	Windows 11 Version 24H2	10.0.26100.0 < 10.0.26100.8875
Microsoft	Windows 11 Version 24H2	10.0.26100.0 < 10.0.26100.8875
Microsoft	Windows 11 Version 25H2	10.0.26200.0 < 10.0.26200.8875
Microsoft	Windows 11 Version 25H2	10.0.26200.0 < 10.0.26200.8875
Microsoft	Windows 11 version 26H1	10.0.28000.0 < 10.0.28000.2525
Microsoft	Windows 11 version 26H1	10.0.28000.0 < 10.0.28000.2525
Microsoft	Windows Server 2022	10.0.20348.0 < 10.0.20348.5386
Microsoft	Windows Server 2022	10.0.20348.0 < 10.0.20348.5386
Microsoft	Windows Server 2025	10.0.26100.0 < 10.0.26100.33158
Microsoft	Windows Server 2025	10.0.26100.0 < 10.0.26100.33158
Microsoft	Windows Server 2025 (Server Core installation)	10.0.26100.0 < 10.0.26100.33158
Microsoft	Windows Server 2025 (Server Core installation)	10.0.26100.0 < 10.0.26100.33158
microsoft	windows_11_24h2	< 10.0.26100.8875
microsoft	windows_11_24h2	< 10.0.26100.8875
microsoft	windows_11_25h2	< 10.0.26200.8875
microsoft	windows_11_25h2	< 10.0.26200.8875
microsoft	windows_11_26h1	< 10.0.28000.2269
microsoft	windows_11_26h1	< 10.0.28000.2525
microsoft	windows_server_2022	< 10.0.20348.5386
microsoft	windows_server_2025	< 10.0.26100.33158

vendor-advisory patch

45 / 100

✓ No authentication
✓ Low complexity
✓ No user interaction

5.1 / 10.0 v3.1

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

0.27%

Raw Score 0.002660

Percentile 18.5%

Date 2026-10-29

2026-10-29

0.00266

2026-10-28

0.00266

mitre ref →