Information Disclosure Vulnerability in Microsoft Windows Win32K
CVE-2026-50416

3.3LOW

Key Information:

Vendor

Microsoft
Status
Windows 11 Version 24h2
Windows 11 Version 25h2
Windows 11 Version 26h1
Windows Server 2025
Vendor
CVE Published:
14 July 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-50416?

An information disclosure vulnerability in Windows Win32K allows authorized attackers to access sensitive information locally. This security flaw could enable an unauthorized actor to obtain confidential data, leading to potential exploitation in compromised systems. Users are urged to apply available patches to mitigate risks associated with this vulnerability.

Affected Version(s)

Windows 11 Version 24H2 ARM64-based Systems 10.0.26100.0 < 10.0.26100.8875

Windows 11 Version 25H2 ARM64-based Systems 10.0.26200.0 < 10.0.26200.8875

Windows 11 version 26H1 ARM64-based Systems 10.0.28000.0 < 10.0.28000.2525

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-50416-writeup-and-poc
Created by karollooool

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.