Evil-DB LogoEvil-DB
← All CVEs

CVE-2026-50508

medium · 6.5

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

6.5
CVSS
12.1%
EPSS (exploit prob.)
96th
EPSS percentile
2026-06-09
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weaknesses

CWE-200

Affected products

VendorProductAffected versions
microsoftwindows_10_1607< 10.0.14393.9234
microsoftwindows_10_1607< 10.0.14393.9234
microsoftwindows_11_22h2< 10.0.22631.7219
microsoftwindows_11_22h2< 10.0.22631.7219
microsoftwindows_server_2004< 10.0.19045.7417
microsoftwindows_server_2012all versions
microsoftwindows_server_2012r2
microsoftwindows_server_2016< 10.0.14393.9234
microsoftwindows_server_2022< 10.0.20348.5256

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-50508