CVE-2026-49161
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally.
Risk Assessment
An attacker with user privileges can disable or bypass security features, potentially leading to privilege escalation or malware execution.
Recommendation
Install the latest Microsoft PC Manager update that addresses this issue.
Other vulnerabilities in Microsoft PC Manager
See all- CVE-2026-50438High
A vulnerability in Microsoft PC Manager involves improper link resolution before file access ('link following'). This allows an authorized attacker to elevate privileges locally.
- CVE-2026-50512High
Missing authentication for a critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-50511High
Microsoft PC Manager has an improper link resolution before file access ('link following') vulnerability, allowing an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally.