CVE-2026-50345

HighCVSS 7.0/10Last modified Jul 22, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362 CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Jul 14, 2026
Last modified: Jul 22, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-503467.8Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally.CVE-2026-503477.8Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally.CVE-2026-503488.1Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attack CVE-2026-503497.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock CVE-2026-50359.8A vulnerability has been found in code-projects Accounting System 1.0. This affects an unknown part of the file /view_work.php of the compon CVE-2026-503505.5Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disc CVE-2026-503517.8Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally.CVE-2026-503525.5Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose infor CVE-2026-503537.8Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.CVE-2026-503547.1Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-503557.5Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.CVE-2026-503567.0Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authori