CVE-2026-50469

Analyzed Analyzed - Analysis Complete

Windows Projected File System Link Following Vulnerability

Publication date: 2026-07-14

Last updated on: 2026-07-22

Assigner: Microsoft Corporation

Description

Improper link resolution before file access ('link following') in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-14

Last Modified

2026-07-22

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-02

NVD

CVE-2026-50469

EUVD

EUVD-2026-43942

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	windows_11_26h1	to 10.0.28000.2269 (exc)
microsoft	windows_10_1809	to 10.0.17763.9020 (exc)
microsoft	windows_10_1809	to 10.0.17763.9020 (exc)
microsoft	windows_server_2019	to 10.0.17763.9020 (exc)
microsoft	windows_server_2022	to 10.0.20348.5386 (exc)
microsoft	windows_server_2025	to 10.0.26100.33158 (exc)
microsoft	windows_11_26h1	to 10.0.28000.2525 (exc)
microsoft	windows_11_24h2	to 10.0.26100.8875 (exc)
microsoft	windows_11_24h2	to 10.0.26100.8875 (exc)
microsoft	windows_10_21h2	to 10.0.19044.7548 (exc)
microsoft	windows_10_21h2	to 10.0.19044.7548 (exc)
microsoft	windows_10_21h2	to 10.0.19044.7548 (exc)
microsoft	windows_10_22h2	to 10.0.19045.7548 (exc)
microsoft	windows_10_22h2	to 10.0.19045.7548 (exc)
microsoft	windows_10_22h2	to 10.0.19045.7548 (exc)
microsoft	windows_11_25h2	to 10.0.26200.8875 (exc)
microsoft	windows_11_25h2	to 10.0.26200.8875 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-59	The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

Executive Summary

CVE-2026-50469 is a vulnerability in the Windows Projected File System. It involves improper link resolution before file access, also known as 'link following'. This flaw allows an authorized attacker with local access to exploit the system and elevate their privileges.

The vulnerability occurs when the system fails to properly validate or resolve symbolic links or other file system links before accessing files. An attacker could manipulate these links to gain higher privileges on the affected system.

Impact Analysis

If you are using a system with the Windows Projected File System, this vulnerability could impact you in the following ways:

An attacker with local access to your system could exploit this vulnerability to elevate their privileges.
Once privileges are elevated, the attacker could gain unauthorized access to sensitive data, install malicious software, or perform other actions that could compromise the security of your system.
This could lead to data breaches, system compromise, or further attacks on other systems within your network.

Compliance Impact

This vulnerability could affect compliance with common standards and regulations in the following ways:

GDPR: If the vulnerability leads to unauthorized access to personal data, it could result in a data breach. Under GDPR, organizations must protect personal data and report breaches within 72 hours. Failure to do so could lead to significant fines and penalties.
HIPAA: For organizations handling protected health information (PHI), this vulnerability could lead to unauthorized access to PHI. HIPAA requires safeguards to protect PHI, and a breach could result in fines and mandatory corrective actions.
Other standards like ISO 27001 or NIST frameworks require organizations to manage and mitigate vulnerabilities. Failure to address this vulnerability could result in non-compliance with these standards, potentially leading to loss of certifications or other penalties.

Mitigation Strategies

Apply the security update provided by Microsoft to address CVE-2026-50469. The update can be found in the Microsoft Update Guide for this vulnerability.

Ensure all Windows systems are updated to the latest patched version as soon as possible.
Monitor the Microsoft Security Response Center (MSRC) for any additional guidance or updates related to this vulnerability.

Hi! I’m here to help you understand CVE-2026-50469. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70