ID:12915 - Exploit for Information disclosure in Microsoft Windows and Windows Server - CVE-2026-50416

 
Main Vulnerability Database Exploits ID:12915 - Exploit for Information disclosure in Microsoft Windows and Windows Server - CVE-2026-50416

ID:12915 - Exploit for Information disclosure in Microsoft Windows and Windows Server - CVE-2026-50416

Published: August 14, 2026


Vulnerability identifier: #VU138019
Vulnerability risk: Low
CVE-ID: CVE-2026-50416
CWE-ID: CWE-200
Exploitation vector: Local access
Vulnerable software:
Microsoft Windows
Windows Server

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to disclose sensitive information.

The vulnerability exists due to exposure of sensitive information in Win32K when handling local operations. A local user can exploit the issue to disclose sensitive information.

An attacker who successfully exploits this vulnerability could read small portions of heap memory.


Remediation

Install security update from vendor's website.