CVE-2026-50508 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.5 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 94%

Affected Products (NVD)

Vendor	Product	Version
microsoft	windows_10_1607	𝑥 < 10.0.14393.9234
microsoft	windows_10_1607	𝑥 < 10.0.14393.9234
microsoft	windows_11_22h2	𝑥 < 10.0.22631.7219
microsoft	windows_11_22h2	𝑥 < 10.0.22631.7219
microsoft	windows_server_2004	𝑥 < 10.0.19045.7417
microsoft	windows_server_2012	-
microsoft	windows_server_2016	𝑥 < 10.0.14393.9234
microsoft	windows_server_2022	𝑥 < 10.0.20348.5256

𝑥

= Vulnerable software versions

Windows Releases

Platform

Version

Windows 10

1607 (x64, x86)

Windows 11

22H2 (arm64, x64)

Windows Server

2004 Server Core

Windows Server 2012

Server Core	KB5094042
Standard	KB5094042

Windows Server 2012 R2

Server Core	KB5094041
Standard	KB5094041

Windows Server 2016

Server Core	KB5094122
Standard	KB5094122

Windows Server 2022

Server Core	KB5094128
Standard	KB5094128

Common Weakness Enumeration

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50508