CVE-2026-50508HighCVSS 6.5
Windows NTLM Spoofing Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
🎯 Affected products13
- Windows 10 Version 1607 for 32-bit Systems
- Windows 10 Version 1607 for x64-based Systems
- Windows 11 Version 22H2 for ARM64-based Systems
- Windows 11 Version 22H2 for x64-based Systems
- Windows Server 2012
- Windows Server 2012 (Server Core installation)
- Windows Server 2012 R2
- Windows Server 2012 R2 (Server Core installation)
- Windows Server 2016
- Windows Server 2016 (Server Core installation)
- Windows Server 2022
- Windows Server 2022 (Server Core installation)
- Windows Server, version 2004 (Server Core installation)
✅ Remediation
KB5094128 (Security Update) — fixed build 10.0.20348.5256 KB5094127 (Security Update) — fixed build 10.0.19045.7417 KB5093998 (Security Update) — fixed build 10.0.22631.7219 KB5094122 (Security Update) — fixed build 10.0.14393.9234 KB5094042 (Monthly Rollup) — fixed build 6.2.9200.26132 KB5094041 (Monthly Rollup) — fixed build 6.3.9600.23228
🔗 References (13)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50508
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094128
- referencehttps://support.microsoft.com/help/5094128
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094127
- referencehttps://support.microsoft.com/help/5094127
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5093998
- referencehttps://support.microsoft.com/help/5093998
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094122
- referencehttps://support.microsoft.com/help/5094122
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094042
- referencehttps://support.microsoft.com/help/5094042
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094041
- referencehttps://support.microsoft.com/help/5094041