cve 2026 50398

The cve 2026 50398 tag covers Microsoft security information about an Important-rated Windows Media elevation-of-privilege vulnerability. The issue can be exploited by an authenticated attacker across a network and has a CVSS 3.1 base score of 8.8, with potential effects on system confidentiality, integrity, and availability. Microsoft says the vulnerability affects Windows 11 versions 24H2, 25H2, and 26H1, as well as Windows Server 2025 and Server Core. The available coverage notes that Microsoft has fixed the flaw, which was not publicly disclosed or observed in active attacks and is considered less likely to be exploited.