Yüksek CVSS 7.8
CVE-2026-50387: 365 Copilot: yığıt (stack) taşması
Açıklama (NVD)
Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.
Özet bilgiler
- Ürün
- Microsoft 365 Copilot
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,33 (yüzdelik 27)
- CWE
- CWE-121
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| microsoft-365-copilot | — | — | — |
| microsoft-microsoft-365 | — | — | — |
| microsoft-office-2021 | — | — | — |
| microsoft-office-2024 | — | — | — |
| microsoft-windows-10-1607 | — | — | 10.0.14393.9339 |
| microsoft-windows-10-1607 | — | — | 10.0.14393.9339 |
| microsoft-windows-10-1809 | — | — | 10.0.17763.9020 |
| microsoft-windows-10-1809 | — | — | 10.0.17763.9020 |
| microsoft-windows-10-21h2 | — | — | 10.0.19044.7548 |
| microsoft-windows-10-21h2 | — | — | 10.0.19044.7548 |
| microsoft-windows-10-21h2 | — | — | 10.0.19044.7548 |
| microsoft-windows-10-22h2 | — | — | 10.0.19045.7548 |
| microsoft-windows-10-22h2 | — | — | 10.0.19045.7548 |
| microsoft-windows-10-22h2 | — | — | 10.0.19045.7548 |
| microsoft-windows-11-24h2 | — | — | 10.0.26100.8875 |
| microsoft-windows-11-24h2 | — | — | 10.0.26100.8875 |
| microsoft-windows-11-25h2 | — | — | 10.0.26200.8875 |
| microsoft-windows-11-25h2 | — | — | 10.0.26200.8875 |
| microsoft-windows-11-26h1 | — | — | 10.0.28000.2269 |
| microsoft-windows-11-26h1 | — | — | 10.0.28000.2525 |
| microsoft-windows-server-2012 | — | — | — |
| microsoft-windows-server-2012 | r2 | r2 | — |
| microsoft-windows-server-2016 | — | — | 10.0.14393.9339 |
| microsoft-windows-server-2019 | — | — | 10.0.17763.9020 |
| microsoft-windows-server-2022 | — | — | 10.0.20348.5386 |
| microsoft-windows-server-2025 | — | — | 10.0.26100.33158 |