This vulnerability (CVE-2026-50502) involves insufficient granularity of access control in the Windows Event Logging Service on Windows 10 Version 1607 (build 10.0.14393.0). It enables an attacker with some level of authorization to execute code remotely, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. The CVSS 3.1 base score is 8.0, indicating high severity, with network attack vector, low attack complexity, and requiring privileges and user interaction. Microsoft has released an official fix to remediate this vulnerability.

Successful exploitation allows an authorized attacker to execute arbitrary code remotely over the network, resulting in high impact to confidentiality, integrity, and availability of the system. This could lead to full system compromise if exploited.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50502 to remediate this vulnerability.