[CVE-2026-50414] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…

Descripción técnica

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network.

Puntuación CVSS

Score: 7.5/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Windows 11 24h2, Windows 11 25h2, Windows 11 26h1, Windows server 2025 — Microsoft

Debilidades (CWE)

CWE-362, CWE-416

Fuente oficial

Publicado en NIST NVD.