This vulnerability (CVE-2026-50302) is due to improper certificate validation in Windows Cryptographic Services on Windows 10 Version 21H2 (build 10.0.19044.0). It enables an attacker to bypass security features remotely by exploiting the certificate validation weakness. The issue is tracked under CWE-295 (Improper Certificate Validation). Microsoft has published an official fix to remediate this vulnerability.

The vulnerability allows an unauthorized attacker to bypass security features over a network, potentially leading to limited confidentiality and integrity impacts. The CVSS score of 4.2 reflects a medium severity with network attack vector, high attack complexity, no privileges required, and user interaction needed. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 21H2 (build 10.0.19044.0) as detailed in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50302. No additional mitigations are specified by the vendor.