CVE-2026-58636: Microsoft Pc Manager

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper link resolution before file access ('link following') in Window PC Manager allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Pc Manager: before 3.21.6.0 (fixed in 3.21.6.0)

Published 2026-07-14. Last modified 2026-07-17.