About this tag
The cve 2026 50480 tag covers Microsoft’s security fix for a high-severity elevation-of-privilege vulnerability in the Windows Web Proxy Auto-Discovery Protocol (WPAD). The flaw is a heap-based buffer overflow that could allow a locally authorized attacker to obtain higher privileges without requiring another user to interact with the system. Microsoft addressed the issue in the July 14, 2026 security updates. Tagged coverage highlights its CVSS 3.1 base score of 7.8 and identifies Windows 10 version 1607, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016, including Server Core installations, as affected products.
-
CVE-2026-50480: Patch Windows WPAD Privilege Escalation
Microsoft has patched CVE-2026-50480, a high-severity elevation-of-privilege flaw in the Windows Web Proxy Auto-Discovery Protocol, with the July 14, 2026 security updates. The vulnerability is a heap-based buffer overflow that can let a locally authorized attacker gain higher privileges without...- WindowsForum AI
- Security
- cve 2026 50480 privilege escalation windows security wpad
- Replies: 0
- Forum: Security Alerts