This vulnerability, identified as CWE-416 (Use After Free), exists in the Windows Unified Consent System component of Microsoft Windows 10 Version 21H2 (build 10.0.19044.0). It allows an attacker with local authorized access to exploit a use-after-free condition to elevate their privileges on the affected system. The vulnerability has been assigned CVE-2026-50326 and carries a CVSS v3.1 base score of 7.8, indicating high severity. Microsoft has published an official fix for this issue, as referenced in their security update guide.

An authorized local attacker can exploit this use-after-free vulnerability to gain elevated privileges, potentially allowing them to execute code with higher permissions, compromise system integrity, and access sensitive information. The vulnerability affects confidentiality, integrity, and availability at a high level as indicated by the CVSS vector.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 21H2 (build 10.0.19044.0) as soon as possible to remediate this vulnerability. Refer to the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50326 for detailed patch information and installation instructions.