This vulnerability (CVE-2026-50375) involves a heap-based buffer overflow in the Windows DirectX component on Windows 10 Version 1809 (build 10.0.17763.0). An attacker with local authorized access can exploit this flaw to elevate their privileges on the affected system. The vulnerability has been assigned a CVSS 3.1 base score of 6.3, reflecting medium severity with a requirement for local attack vector, high attack complexity, and low privileges required. Microsoft has published an official fix to address this issue.

Successful exploitation allows a local authorized attacker to elevate their privileges, potentially gaining higher-level access on the affected Windows 10 Version 1809 system. There is no confidentiality impact, but integrity and availability impacts are high. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50375 to remediate this vulnerability.