PT-2026-58377 · Microsoft · Windows 11+1

CVE-2026-50398 · Published 2026-07-14 · Updated 2026-07-15

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows 11 (affected versions not specified) Windows Server 2025 (affected versions not specified)

Description A race condition exists in Windows Media, where concurrent execution using a shared resource with improper synchronization allows an authorized attacker to elevate privileges over a network. A race condition is a situation where the system's substantive behavior is dependent on the sequence or timing of other uncontrollable events.

Recommendations Apply the security updates provided by Microsoft for Windows 11. Apply the security updates provided by Microsoft for Windows Server 2025.

Fix

Use After Free

Race Condition

Weakness Enumeration

CWE-416

CWE-362

Related Identifiers

CVE-2026-50398

Affected Products

Windows 11

Windows Server 2025

References · 3

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50398 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-50398 · Security Note
• https://twitter.com/windowsforum/status/2077295392014598328 · Twitter Post