logo

CVE-2026-50454: Public PoC Shows Windows AppResolver Elevation of Privilege to SYSTEM

ID: d64480fe-2157-56ff-9d07-996dfc3dea90

STIX ID: report--d64480fe-2157-56ff-9d07-996dfc3dea90

Feed Name: securityonline.info

Threat Score
60/100

Date Published: 2026-07-24

Date Updated: 2026-07-25

Author: Do Son

...
...

A public proof-of-concept for CVE-2026-50454 — a Windows AppResolver elevation-of-privilege that can bypass UAC and escalate a local Administrator to SYSTEM — was published; Microsoft fixed the issue in the July 2026 cumulative update (patched builds listed) and defenders are advised to apply updates and consider application control mitigations, while no confirmed exploitation in the wild has been reported.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.