CVE-2026-50488

Опубликовано: 14 июл. 2026

Источник: msrc

CVSS3: 7.8

EPSS Низкий

Описание

Clipboard User Service Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

Обновления

Продукт	Статья	Обновление
Windows 11 Version 24H2 for ARM64-based Systems	5101650	Security Update
Windows 11 Version 24H2 for x64-based Systems	5101650	Security Update
Windows Server 2025	5099536	Security Update
Windows Server 2025 (Server Core installation)	5099536	Security Update
Windows 11 Version 25H2 for ARM64-based Systems	5101650	Security Update
Windows 11 Version 25H2 for x64-based Systems	5101650	Security Update

Показывать по

Возможность эксплуатации

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

EPSS

Процентиль: 44%

0.00574

Низкий

7.8 High

CVSS3

Связанные уязвимости

CVE-2026-50488

CVSS3: 7.8

nvd

16 дней назад

Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

GHSA-59fg-gpjq-7p2g

CVSS3: 7.8

github

16 дней назад

Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

EPSS

Процентиль: 44%

0.00574

Низкий

7.8 High

CVSS3