PT-2026-58327 · Microsoft · Windows

Published 2026-07-14 · Updated 2026-07-15 · CVE-2026-50337

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows (affected versions prior to July 2026 patchday)

Description An incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally. This issue occurs due to a bad type cast, which is a programming error where a value of one data type is forced into another incompatible type, potentially leading to memory corruption or unauthorized access.

Recommendations Apply the July 2026 updates to resolve this issue.

Fix

Incorrect Type Conversion or Cast

Weakness Enumeration

CWE-704

Related Identifiers

CVE-2026-50337

Affected Products

Windows

References · 5

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-50337 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-50337 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50337 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50337 · Vendor Advisory
• https://twitter.com/windowsforum/status/2077261414004117595 · Twitter Post