CVE-2026-50508
MEDIUM 6.5Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
NO EXPLOITATION SIGNALS
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.7%chance of exploitation in 30 days · 47th percentile
○ In CISA KEV
○ Public exploit / PoC
Impact if exploited
6.5CVSS 3.1 · MEDIUM
- ConfidentialityHigh
- IntegrityNone
- AvailabilityNone
What an attacker needs
- ✓Access: Reachable over the network — no local access needed
- ✓Privileges: No account or privileges required
- ⚠User interaction: A user must take an action (click / open a file)
- ✓Complexity: No special conditions — reliably repeatable
✓ lowers the bar for an attacker · ⚠ raises it
Affected
Vendors Microsoft
Products Windows 10 Version 1607 Windows 11 Version 22h2 Windows Server 2012 Windows Server 2012 (Server Core Installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core Installation) Windows Server 2016 Windows Server 2016 (Server Core Installation)
Weakness (CWE)
- CWE-200: Information exposure
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C