PT-2026-58480 · Microsoft · Windows 10 Version 1607+9

Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-50509

Mitre

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-50509

Affected Products

Windows 10 Version 1607

Windows 10 Version 1809

Windows 10 Version 21H2

Windows 10 Version 22H2

Windows 11 Version 24H2

Windows 11 Version 25H2

Windows 11 Version 26H1

Windows Server 2016

Windows Server 2019

Windows Server 2025

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-50509 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50509 · Vendor Advisory