This vulnerability (CVE-2026-50379) involves a race condition (CWE-362) in Windows Media on Windows 11 Version 24H2 (build 10.0.26100.0). Improper synchronization during concurrent access to shared resources can be exploited by an authorized attacker over a network to elevate privileges. The CVSS 3.1 vector indicates network attack vector with high complexity, low privileges required, no user interaction, and impacts confidentiality, integrity, and availability with high severity. Microsoft has published an official fix to address this issue.

An attacker with authorized network access can exploit this race condition to gain elevated privileges on the affected system. This could lead to full compromise of confidentiality, integrity, and availability of the system. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50379 to remediate this vulnerability.