CVE-2026-50421

A type confusion vulnerability in Windows Connected User Experiences and Telemetry allows an authorized attacker to escalate privileges locally, potentially leading to unauthorized access to sensitive resources. Organizations using affected Windows products should prioritize patching this vulnerability to mitigate the risk of exploitation, particularly in environments where user permissions are critical.