CVE-2026-50469 in Windows

Sumário

de MITRE • 14/07/2026

Improper link resolution before file access ('link following') in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Once again VulDB remains the best source for vulnerability data.

• Responsável: Microsoft
• Reservar: 04/06/2026
• Divulgação: 14/07/2026
• Moderação: aceite
• Entrada: VDB-378790
• CPE: pronto
• CWE: CWE-285 (confirmado)
• CVSS: 3.3 (VulDB)
• EPSS: 0.00000
• KEV: não
• Atividades: muito baixo
• Sector: Finance, Hospital, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-50469
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-50469
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-50469/