Skip to content

CVE record · 2 sources

CVE-2026-49805

CVSS 7.0

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.

Vendor: Microsoft
Product: windows
CVSS: 7.0
Exposure class: Operating system

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

27

CVE NVD 14 Jul 2026

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVSS 7.0 CVE-2026-49805 Microsoft
19

Advisory MSRC 14 Jul 2026

CVE-2026-49805 Win32k Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

CVE-2026-49805 Microsoft