CVE-2026-50475

Think of the kernel as Windows’ control room memory. This bug can accidentally “peek past” the end of a memory area and reveal information that was not meant to be shown.
In real life, that means someone who already has access to log in on the machine could potentially steal sensitive data from memory.

This affects the Windows versions listed: Windows 10, Windows 11, and Windows Server (2012, 2012 R2, 2016, 2019, 2022, 2025).
It matters most to you if an attacker (or a malicious insider) can get authorized local access to a system—because the vulnerability is local and requires low levels of authorization.
Treat it as relevant only for machines where the attacker can reach the system locally (e.g., someone can log on or otherwise gain local authorized access); if nobody can get local access, risk is much lower.

Marked RED because it’s a kernel-level information disclosure flaw with a patch already available, and it can expose sensitive data to an authorized local user.
Even though it’s not described as requiring user interaction and no public exploit is confirmed here, the impact is potentially high because kernel memory can contain valuable secrets.