CVE-2026-50416

Win32k Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.

Affected

Microsoft · Windows 11 Version 24H2 · Windows 11 Version 25H2 · Windows 11 version 26H1 · Windows Server 2025 · Windows Server 2025 (Server Core installation)

CVSS v3.1 NVD

3.3 LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.46% chance of exploitation in the next 30 days, 38th percentile

Published

2026-07-14

Updated

2026-10-08

Proof-of-concept exploits (1)

• karollooool/CVE-2026-50416-writeup-and-poc48★ · 2026-10-13

Security advisories

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50416

References

• CVE Record
• NVD entry

Related

• CVE-2026-83991