PT-2026-58400 · Microsoft · Connected User Experiences/Telemetry+1

CVE-2026-50421 · Published 2026-07-14 · Updated 2026-07-15

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry (affected versions not specified)

Description A type confusion issue occurs when a resource is accessed using an incompatible type. This flaw allows an authorized local attacker to elevate their privileges on the system.

Recommendations Install the July updates.

Fix

DoS

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

CVE-2026-50421

Affected Products

Connected User Experiences/Telemetry

Windows

References · 5

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50421 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-50421 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-50421 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50421 · Security Note
• https://twitter.com/windowsforum/status/2077318791243964649 · Twitter Post