This vulnerability, tracked as CVE-2026-50382 and classified under CWE-822 (Untrusted Pointer Dereference), affects Windows 10 Version 1809 (build 10.0.17763.0). It arises from improper handling of pointers in the DirectX subsystem, enabling a local attacker with limited privileges to execute arbitrary code with elevated privileges. The vulnerability has been assigned a CVSS v3.1 base score of 8.8, reflecting high impact and exploitability with low attack complexity and no user interaction required. Microsoft has published an official fix to address this issue.

Successful exploitation allows an authorized local attacker to execute arbitrary code with elevated privileges, potentially leading to full system compromise. The vulnerability impacts confidentiality, integrity, and availability of the affected system. There are no known exploits in the wild at the time of publication.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50382 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor.