Elevation of Privilege Vulnerability in Microsoft PC Manager
CVE-2026-50438

8.8HIGH

Key Information:

Vendor

Microsoft

Vendor
CVE Published:
14 July 2026

What is CVE-2026-50438?

An improper link resolution vulnerability has been identified in Microsoft PC Manager, which allows an authorized attacker to perform local privilege escalation. This flaw enables adversaries to gain unauthorized access by manipulating link references before file access, leading to potential exploitation of other system components. Users of Microsoft PC Manager should be aware of this issue and apply the provided patches to mitigate any associated risks. Comprehensive details can be found in the official advisory from Microsoft.

Affected Version(s)

Microsoft PC Manager 1.0.0 < 3.22.1.0

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.