CVE-2026-50466Disclosure(microsoft / windows_11_24h2)

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch microsoft windows_11_24h2 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

microsoft CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Patch / fix

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50466

Weakness type (CWE)

CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2025

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 1 signal
Disclosure: 1 classified signal
2 total mentions across 1 day

Affected systems

Vendors

microsoft

Products

windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2025

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Disclosure

150.0%

Patch

150.0%

Referenced assets5 URLs

By indicator

Full discourse2 posts

Bad_Jubies@Bad_Jubies98d
Disclosure
My first set of Microsoft vulnerabilities have been published in this month’s patch Tuesday 🥳 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50502 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49162 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50466 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50469
Post summary
The post announces four newly disclosed Microsoft CVEs for the month’s Patch Tuesday, linking to official Microsoft update pages.
2212683.1K
436 followersView on X
Windows Forum@windowsforum98d
Patch
🪟 July’s Windows update fixes a local elevation bug that turns “limited access” into “your machine now belongs to me.” Patch it—because users shouldn’t need admin rights to ruin your day. https://windowsforum.com/threads/cve-2026-50466-install-july-updates-to-fix-windows-elevation-bug.438506/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #Windows11 #WindowsServer2025 #PrivilegeEscalation #PatchTuesday https://t.co/ldTAY0dNyH
Post summary
The post highlights the July Windows update that fixes CVE‑2026‑50466, a local privilege‑escalation flaw, and urges users to install the patch without any indication of active exploitation or PoC.
0000036
1.2K followersView on X

CPE platform detail7 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

7 of 7 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	microsoft	windows_11_24h2	-	-	arm64
OS	microsoft	windows_11_24h2	-	-	x64
OS	microsoft	windows_11_25h2	-	-	arm64
OS	microsoft	windows_11_25h2	-	-	x64
OS	microsoft	windows_11_26h1	-	-	arm64
OS	microsoft	windows_11_26h1	-	-	x64
OS	microsoft	windows_server_2025	-	-	-

Explore more

Back to dashboard microsoft CVEs windows_11_24h2 vulnerabilities