CVE-2026-50512: Microsoft PC Manager Elevation of Privilege Vulnerability

Synopsis

A link-following vulnerability in Microsoft PC Manager allows a local attacker with a standard user account to elevate their privileges to a higher level. The flaw is reached locally, requires no network access, and only needs a low-privilege account to trigger. Successful exploitation gives the attacker full read, write, and control over the affected system. A patched-image rebuild at version 3.21.6.0 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host; no network access is required to trigger this vulnerability.

• AuthenticationRequired

  Any low-privilege local account is sufficient; the attacker does not need administrative credentials.

• Victim interactionNot required

  No action from another user or victim is needed; the attacker can trigger the flaw entirely on their own.

• Attack complexityDetail

  The exploit is reliable and condition-free, with no race conditions or special environmental factors required.

Blast Radius

• A successful attacker reads sensitive files and data on the host that would otherwise be restricted to higher-privilege accounts.
• A successful attacker writes or replaces files anywhere on the local filesystem, including system binaries and configuration files.
• A successful attacker can crash, halt, or destabilize running services and processes on the affected host.
• Combined read, write, and execution control effectively gives the attacker full local system compromise from a standard user starting point.