PT-2026-58400 · Microsoft · Connected User Experiences/Telemetry+1

CVE-2026-50421

·

Published

2026-07-14

·

Updated

2026-07-23

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry (affected versions not specified)
Description A type confusion issue occurs when a resource is accessed using an incompatible type. This flaw in the Windows Connected User Experiences and Telemetry service allows an authorized local attacker to elevate their privileges on the system.
Recommendations Install the July updates.

Fix

DoS

Type Confusion

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-10345
CVE-2026-50421

Affected Products

Connected User Experiences/Telemetry
Windows