CVE-2026-50488
Clipboard User Service Elevation of Privilege Vulnerability
CVE-2026-50488 is fixed in 6 products on 1 platform, first by KB5101650, released July 14, 2026. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.8
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0032
25th percentile
<p>Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.</p>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Microsoft | |||
| Windows 11 Version 24H2 for ARM64-based Systems | KB5101650 | Jul 14, 2026 | |
| Windows 11 Version 24H2 for x64-based Systems | KB5101650 | Jul 14, 2026 | |
| Windows 11 Version 25H2 for ARM64-based Systems | KB5101650 | Jul 14, 2026 | |
| Windows 11 Version 25H2 for x64-based Systems | KB5101650 | Jul 14, 2026 | |
| Windows Server 2025 | 26100.33158 | KB5099536 | Jul 14, 2026 |
| Windows Server 2025 (Server Core installation) | 26100.33158 | KB5099536 | Jul 14, 2026 |