HomeCVE Intelligence › CVE-2026-50297
CVSS 7.0 HIGH 🔴 ACTIVELY EXPLOITED Security Vulnerability

CVE-2026-50297: ZDI-26-446: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escal…

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to…

7.0CVSS Score
HIGHSeverity
NOCISA KEV
0.2%EPSS Score
Security VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-50297
VendorUnknown Vendor
Affected ProductUnknown Product
Vulnerability TypeSecurity Vulnerability
CVSS Score7.0 (HIGH)
EPSS Score0.2% probability of exploitation in the next 30 days
Actively Exploited✅ Yes
Patch StatusPending Vendor Disclosure
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS ratin... [Full analysis available on Pro]

⚡ DETECTION RULES AVAILABLE

Get CVE-2026-50297 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence