EUVD-2026-43935
GHSA-mq63-hg3r-h2qp
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local vector and standard-user prerequisite give AV:L/PR:L; no interaction and a straightforward authorization bypass give UI:N/AC:L; escalation to SYSTEM yields full C:H/I:H/A:H.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
2DescriptionCVE.org
Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.
AnalysisAI
Local privilege escalation in the Windows OLE (Object Linking and Embedding) component allows an already-authenticated, low-privileged user on affected Windows and Windows Server builds to elevate to higher privileges through an improper authorization check (CWE-285). Microsoft has released a patch, and no public exploit has been identified at time of analysis. Impact is high across confidentiality, integrity, and availability, though exploitation requires prior local code execution.
Technical ContextAI
OLE (Object Linking and Embedding) is a long-standing Windows COM-based framework that lets applications embed and link objects (documents, media, controls) across process and application boundaries. The root-cause class here is CWE-285 (Improper Authorization): the OLE subsystem fails to correctly validate whether the requesting security principal is permitted to perform a given operation, allowing a low-privileged caller to invoke functionality reserved for a higher-privileged context. Per the supplied CPE data, the flaw spans the OLE code shared across Windows 10 (1607, 1809, 21H2, 22H2), Windows 11 (24H2, 25H2, 26H1), and Windows Server 2012 through 2025, indicating the defective authorization logic resides in a core OS library present across a wide range of servicing branches rather than in a version-specific feature.
RemediationAI
Patch available per vendor advisory: apply the Microsoft security update for CVE-2026-50344 for each affected build as listed in the MSRC Update Guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50344, which enumerates the exact fixed KB/build numbers per operating system (exact fixed-build strings were not included in the supplied data and should be taken from that advisory). Because this is a local privilege-escalation bug with no documented standalone workaround, the update is the primary and recommended control; prioritize deployment on multi-user systems, Remote Desktop / session hosts, jump servers, and any host where untrusted or lower-trust users can execute code. As interim compensating controls until patching, restrict local logon and interactive/code-execution rights to trusted users, enforce least privilege and application allow-listing to limit an attacker's ability to run the initial low-privileged code, and increase monitoring for anomalous process creation and token-elevation behavior - noting these measures reduce but do not eliminate the risk and do not substitute for the fix.
More in Windows Server 2012
View allWindows MSHTML component contains a remote code execution vulnerability that allows attackers to craft malicious ActiveX
<p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged fi
Remote code execution in Microsoft Office 2007-2016 and Windows Vista through 10 allows attackers to execute arbitrary c
Windows MSDT (Microsoft Support Diagnostic Tool) allows remote code execution when called via the ms-msdt URL protocol f
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
The Windows VBScript engine contains a remote code execution vulnerability in object handling that allows full system co
Windows Print Spooler Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no auth
The Win32k kernel-mode driver in Windows Vista through Windows Server 2016 allows local privilege escalation, exploited
Windows Search Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely explo
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in
Active Directory Domain Services Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.5), this vulnerabilit
Same weakness CWE-285 – Improper Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today