PT-2026-58322 · Microsoft · Windows Application Model

Published 2026-07-14 · Updated 2026-07-15 · CVE-2026-50331

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Application Model (affected versions not specified)

Description A use after free issue in the Windows Application Model allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed, which can be exploited to execute arbitrary code or gain higher permissions.

Recommendations Install the July Windows updates.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-50331

Affected Products

Windows Application Model

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-50331 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50331 · Vendor Advisory
• https://twitter.com/windowsforum/status/2077270729234489484 · Twitter Post