CVE-2026-50438: Microsoft Pc Manager

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Pc Manager: before 3.22.1.0 (fixed in 3.22.1.0)

Published 2026-07-14. Last modified 2026-07-21.