NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability2 · 2 reads

CVE-2026-50343

CVSS 3.1: 7.8 high
EPSS: <1%p22
Published: Jul 14, 2026 · Jul 14, 2026
Modified: Jul 22, 2026

Analyze CVE-2026-50343 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.

Vendors: microsoft

Products: windows 10 1809, windows 10 21h2, windows 10 22h2, windows 11 24h2, windows 11 25h2, windows 11 26h1, windows server 2019, windows server 2022, windows server 2025

Weakness: CWE-269

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

3 stories

Windows Exploitation Techniques: Dangling COM Object Registrations

Project Zero details patched Windows CVE-2026-66804, a privilege escalation via a dangling COM registration.

Google Project ZeroSep 21, 07:00 UTC · Sep 21, 2026ResearchCVE-2026-50343 CVE-2026-668045 · 2 reads

67

Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities

Cisco TalosJul 15, 14:52 UTC · Jul 15, 2026VulnerabilityExploitedCVE-2026-56155 CVE-2026-56164 CVE-2026-50370+892 · 1 read

60

Windows COM Flaw Lets Attackers Gain SYSTEM Privileges With a Malicious DLL

Project Zero details CVE-2026-66804, a Windows COM flaw giving SYSTEM via planted DLL; patched in August, PoC and commercial module public.

Cyber Security NewsSep 22, 09:45 UTC · Sep 22, 2026Exploit / PoCCVE-2026-66804 CVE-2026-503432 · 1 read

52