[CVE-2026-50344] Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.

Descripción técnica

Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Windows 10 1607, Windows 10 1809, Windows 10 21h2, Windows 10 22h2, Windows 11 24h2 — Microsoft

Debilidades (CWE)

CWE-285

Fuente oficial

Publicado en NIST NVD.