[CVE-2026-50367] Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an auth…

Descripción técnica

Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Windows 10 1809, Windows 10 21h2, Windows 10 22h2, Windows 11 24h2, Windows 11 25h2 — Microsoft

Debilidades (CWE)

CWE-118, CWE-822

Fuente oficial

Publicado en NIST NVD.