CVE-2026-50438

Analyzed Analyzed - Analysis Complete

Improper Link Resolution Leading to Privilege Escalation in Microsoft PC Manager

Publication date: 2026-07-14

Last updated on: 2026-07-21

Assigner: Microsoft Corporation

Description

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-14

Last Modified

2026-07-21

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-02

NVD

CVE-2026-50438

EUVD

EUVD-2026-44069

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	pc_manager	to 3.22.1.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-59	The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

Executive Summary

This vulnerability is an improper link resolution issue in Microsoft PC Manager that allows an authorized attacker to elevate their privileges locally. It involves exploiting how links are resolved before accessing files, enabling unauthorized privilege escalation.

Impact Analysis

An attacker could exploit this to gain higher-level access on your system, potentially allowing them to install malicious software, view or modify sensitive data, or take control of your device without proper authorization.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements under GDPR and HIPAA. Organizations may face penalties if such breaches occur due to inadequate security measures.

Mitigation Strategies

Apply the latest security updates from Microsoft for PC Manager as soon as they become available to patch the improper link resolution flaw.

Hi! I’m here to help you understand CVE-2026-50438. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70