high8.8
CVE-2026-50438
Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
Impact
Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Pc Manager | before 3.22.1.0 |
| Microsoft | Microsoft PC Manager | from 1.0.0 before 3.22.1.0 |