PT-2026-58188 · Microsoft · Desktop Windows Manager+1

Published 2026-07-14 · Updated 2026-07-15 · CVE-2026-50300

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows Kernel (affected versions not specified) Windows Desktop Window Manager (affected versions not specified)

Description An integer underflow (wrap or wraparound) in the Windows Kernel allows an authorized attacker to disclose information locally. Additionally, the Windows Desktop Window Manager (DWM) experienced a memory leak that could be exploited by a local user to access sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Integer Underflow

Weakness Enumeration

CWE-125

CWE-191

Related Identifiers

CVE-2026-50300

Affected Products

Desktop Windows Manager

Windows Kernel

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-50300 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50300 · Vendor Advisory
• https://twitter.com/windowsforum/status/2077253367361839301 · Twitter Post