Cyber Resilience

CVE-2026-50298

Memory Safety in Microsoft Windows 10 21H2 ≤ 10.0.19044.7548

Published
14 July 2026
Modified
22 July 2026
Patch / advisory
CVSS Score v3.1 6.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0033 25th percentile
Risk Priority 45 floored blend · peak EPSS

Summary

CVE-2026-50298 is a medium-severity Integer Overflow or Wraparound (CWE-190) vulnerability in Microsoft Windows 10 21H2. Its CVSS base score is 6.8 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 25th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to SI-10 (Information Input Validation) and SI-16 (Memory Protection) — see the control section below for these in your framework.

EU & UK References

Vulnerability Data

Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Why these techniques?

Integer overflow in kernel driver (Spaceport.sys) directly enables local privilege escalation via physical access vector.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2026-56647Same product: Microsoft Windows 10 1607
CVE-2026-58532Same product: Microsoft Windows 10 1607
CVE-2026-42916Same product: Microsoft Windows 10 1607
CVE-2026-49168Same product: Microsoft Windows 10 1607
CVE-2026-35415Same product: Microsoft Windows 10 1607
CVE-2026-50435Same product: Microsoft Windows 10 1607
CVE-2026-54115Same product: Microsoft Windows 10 1607
CVE-2026-56182Same product: Microsoft Windows 10 1607
CVE-2026-50306Same product: Microsoft Windows 10 1607
CVE-2026-44812Same product: Microsoft Windows 10 1607

Affected Assets

microsoft
windows 10 1607
≤ 10.0.14393.9339 · ≤ 10.0.14393.9339
microsoft
windows 10 1809
≤ 10.0.17763.9020 · ≤ 10.0.17763.9020
microsoft
windows 10 21h2
≤ 10.0.19044.7548 · ≤ 10.0.19044.7548 · ≤ 10.0.19044.7548
microsoft
windows 10 22h2
≤ 10.0.19045.7548 · ≤ 10.0.19045.7548 · ≤ 10.0.19045.7548
microsoft
windows 11 24h2
≤ 10.0.26100.8875 · ≤ 10.0.26100.8875
microsoft
windows 11 25h2
≤ 10.0.26200.8875 · ≤ 10.0.26200.8875
microsoft
windows 11 26h1
≤ 10.0.28000.2269 · ≤ 10.0.28000.2525
microsoft
windows server 2012
all versions, r2
microsoft
windows server 2016
≤ 10.0.14393.9339
microsoft
windows server 2019
≤ 10.0.17763.9020
+2 more product configuration(s) — see NVD for full list

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)
  • SI-10 Information Input Validation
  • SI-16 Memory Protection
  • PE-3 Physical Access Control
Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)

Validate
Prove the fix (OWASP ASVS)
  • V5.2.6

Mitigating Controls (NIST 800-53 r5) AI

prevent

Directly prevents integer overflow exploitation in Spaceport.sys by enforcing validation of all inputs that could trigger wraparound conditions.

prevent

Provides memory protection mechanisms that block privilege escalation attempts arising from the integer overflow in the kernel driver.

prevent

Restricts physical access required to deliver the attack against the vulnerable Windows Spaceport.sys component.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure SDLC practices directly require use of safe arithmetic, bounds checks, and testing that prevent integer overflows.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

detects

Security testing in development can detect integer overflows before release.

prevents

Secure SDLC mandates input validation and arithmetic checks that prevent integer overflows.

degrades

Application security requirements include bounds checking and safe arithmetic to avoid overflow conditions.

degrades

Secure architecture principles require defensive coding patterns that mitigate integer wraparound risks.

prevents

Secure coding standards explicitly forbid unsafe integer operations and mandate overflow-safe constructs.

References