CVE-2026-50480

Опубликовано: 14 июл. 2026

Источник: msrc

CVSS3: 7.8

EPSS Низкий

Описание

Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.

Продукт	Статья	Обновление
Windows Server 2012	5099445 5099415	Monthly Rollup IE Cumulative
Windows Server 2012 (Server Core installation)	5099445 5099415	Monthly Rollup IE Cumulative
Windows Server 2012 R2	5099415 5099444	IE Cumulative Monthly Rollup
Windows Server 2012 R2 (Server Core installation)	5099415 5099444	IE Cumulative Monthly Rollup
Windows Server 2016	5099535	Security Update
Windows 10 Version 1607 for 32-bit Systems	5099535	Security Update
Windows 10 Version 1607 for x64-based Systems	5099535	Security Update
Windows Server 2016 (Server Core installation)	5099535	Security Update

Показывать по

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

EPSS

Процентиль: 15%

0.0024

Низкий

7.8 High

CVSS3

CVE-2026-50480

CVSS3: 7.8

nvd

16 дней назад

Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.

GHSA-8c44-h2jq-c85w

CVSS3: 7.8

github

16 дней назад

Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.

BDU:2026-09737

CVSS3: 7.8

fstec

17 дней назад

Уязвимость реализации протокола Web Proxy Auto-Discovery Protocol (WPAD) операционных систем Windows, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 15%

0.0024

Низкий

7.8 High

CVSS3