CVE-2026-50462
7.8 highEPSS 0.5%
High (7.8) in microsoft. EPSS 0.5% chance of exploitation in the next 30 days.
External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Severity
CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
- CWE
- CWE-73
- Published
- Modified
- Record from
- the NVD, synced
Affected
- microsoft:windows_10_1607
- microsoft:windows_10_1809
- microsoft:windows_10_21h2
- microsoft:windows_10_22h2
- microsoft:windows_11_24h2
- microsoft:windows_11_25h2
- microsoft:windows_11_26h1
- microsoft:windows_server_2012
- microsoft:windows_server_2016
- microsoft:windows_server_2019
- microsoft:windows_server_2022
- microsoft:windows_server_2025
References
Check your stackJSON