This vulnerability involves an incorrect implementation of the authentication algorithm in the Windows SMB Server component of Windows 10 Version 21H2 (build 10.0.19044.0). An authorized attacker with network access can exploit this flaw to elevate their privileges, potentially gaining higher-level access than intended. The issue is tracked as CWE-303 (Incorrect Implementation of Authentication Algorithm). Microsoft has published an official fix to address this vulnerability.

Successful exploitation allows an authorized attacker to elevate privileges remotely over the network, potentially leading to full system compromise or unauthorized access to sensitive resources. The vulnerability affects confidentiality, integrity, and availability, as indicated by the CVSS vector (C:H/I:H/A:H). There are no known exploits in the wild at this time.

An official fix is available from Microsoft. It is recommended to apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50360 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor advisory.