CVE-2026-50438
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
A vulnerability in Microsoft PC Manager involves improper link resolution before file access ('link following'). This allows an authorized attacker to elevate privileges locally.
Risk Assessment
The risk is that an attacker with limited privileges could access protected system resources or execute code with higher privileges, potentially leading to full system compromise.
Recommendation
It is recommended to immediately update Microsoft PC Manager to the latest version containing the security fix. Additionally, restrict application access to trusted users only.
Other vulnerabilities in Microsoft PC Manager
See all- CVE-2026-50512High
Missing authentication for a critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-50511High
Microsoft PC Manager has an improper link resolution before file access ('link following') vulnerability, allowing an authorized attacker to elevate privileges locally.
- CVE-2026-49161High
Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally.
Original NVD description (English source)
Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.