Vulnerabilities
CVE‑2026‑50332: Windows Kernel Elevation of Privilege Vulnerability – Immediate Update Required
Microsoft has identified CVE‑2026‑50332, a kernel‑level elevation of privilege flaw affecting Windows systems. The vulnerability allows local attackers to gain higher privileges. Defenders should verify patch status and apply the latest cumulative update.
What happened
Microsoft identified CVE‑2026‑50332, a kernel‑level elevation of privilege flaw that can be exploited by local users to gain higher privileges on Windows systems.
Impact
Defenders should be aware that the vulnerability can allow an attacker to execute code with SYSTEM rights, potentially compromising the entire host. The flaw is present in the Windows kernel and affects all supported Windows releases.
What to do
- Verify that your systems have the latest cumulative update installed.
- Check the Microsoft Security Advisory for the specific KB number and apply the patch immediately.
- Run a vulnerability scan to confirm remediation.
Mitigation
Apply the latest cumulative update; no work‑arounds are available until the patch is installed.
Related vulnerabilities
Windows exFAT Elevation of Privilege Vulnerability (CVE‑2026‑69619) – Immediate Patch Required
Microsoft released a security update for CVE‑2026‑69619, an elevation‑of‑privilege flaw in the Windows exFAT file‑system driver. The vulnerability allows local attackers to gain SYSTEM rights by manipulating exFAT volumes. All Windows 10/11 and Server 2022 installations that use exFAT are affected; apply the update via Windows Update or WSUS immediately.
Read briefing
CVE-2026-69328: Windows Storage Elevation of Privilege Vulnerability – Immediate Patch Required
A flaw in Windows Storage lets local users gain SYSTEM privileges by manipulating file metadata. Windows 10 and 11 systems must install the latest security update. Defenders should verify patch status and monitor for anomalous privilege escalation.
Read briefing
Windows ReFS Elevation of Privilege Vulnerability (CVE-2026-50441) – Immediate Patch Required
A local privilege escalation flaw in Windows ReFS allows attackers with local access to gain SYSTEM rights via a crafted volume. Microsoft has issued a cumulative update; all affected systems must be patched immediately.
Read briefing
CVE-2026-70104: Windows Win32k Privilege Escalation Vulnerability
A local privilege escalation flaw in the Windows Win32 kernel subsystem allows an authenticated user to gain elevated rights by dereferencing an untrusted pointer. Microsoft has issued a patch; defenders should update systems immediately and verify that the kernel component is patched.
Read briefing