CVE-2026-50425

A use-after-free vulnerability in the Windows Internal System User Profile allows authorized attackers to elevate their privileges locally, potentially granting them unauthorized access to sensitive system resources. Organizations using affected Windows products should prioritize patching this vulnerability to mitigate the risk of local privilege escalation attacks. This is particularly critical for environments where users have elevated permissions or access to sensitive data.