CVE-2026-50677: Windows Media Elevation of Privilege Vulnerability

Q: Who is exposed to this vulnerability?

Systems running the listed Microsoft Windows 11 versions are in scope. Exploitation requires an attacker to already have authorized local access to the affected system.

Q: Can this be exploited remotely or without credentials?

The provided vector indicates local attack access and low privileges are required, with no user interaction required. The data does not indicate a remote or unauthenticated attack path.

Q: What is the likely impact if exploitation succeeds?

A successful exploit can elevate the attacker’s privileges locally. The severity vector indicates high impact to confidentiality, integrity, and availability.

Q: What should be done to remediate this issue?

Apply the available patch for the affected Windows 11 versions. The provided information does not specify an alternative mitigation if patching cannot be performed immediately.

Published Jul 14, 2026

Updated

Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

Other sources

Windows Media Elevation of Privilege Vulnerability

— Microsoft

Affected Software

12 affected componentsFixes available

Microsoft Windows 11=26H1

10.0.28000.2525

Microsoft Windows 11=25H2

10.0.26200.8875

Microsoft Windows 11=24H2

10.0.26100.8875

Microsoft Windows 11=26H1

10.0.28000.2525

Microsoft Windows 11=24H2

10.0.26100.8875

Microsoft Windows 11=25H2

10.0.26200.8875

Microsoft Windows 11 24h2<10.0.26100.8875

Microsoft Windows 11 25h2<10.0.26200.8875

Microsoft Windows 11 26h1<10.0.28000.2525

Remediation

Patch Available

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50677

Event History

Jul 14, 2026

CVE Published

via Microsoft·02:00 PM

Data Sourced

via Microsoft·02:00 PM

DescriptionSeverityWeaknessAffected Software

CVE Published

via MITRE·05:08 PM

Data Sourced

via MITRE·05:08 PM

DescriptionSeverity

Data Sourced

via NVD·06:18 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Who is exposed to this vulnerability?

Systems running the listed Microsoft Windows 11 versions are in scope. Exploitation requires an attacker to already have authorized local access to the affected system.

Can this be exploited remotely or without credentials?

The provided vector indicates local attack access and low privileges are required, with no user interaction required. The data does not indicate a remote or unauthenticated attack path.

What is the likely impact if exploitation succeeds?

A successful exploit can elevate the attacker’s privileges locally. The severity vector indicates high impact to confidentiality, integrity, and availability.

What should be done to remediate this issue?

Apply the available patch for the affected Windows 11 versions. The provided information does not specify an alternative mitigation if patching cannot be performed immediately.

CVE-2026-50677: Windows Media Elevation of Privilege Vulnerability

Other sources

Affected Software

Remediation

Patch Available

Event History

Frequently Asked Questions

Who is exposed to this vulnerability?

Can this be exploited remotely or without credentials?

What is the likely impact if exploitation succeeds?

What should be done to remediate this issue?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this vulnerability?

Can this be exploited remotely or without credentials?

What is the likely impact if exploitation succeeds?

What should be done to remediate this issue?