A critical vulnerability, CVE-2026-50343, in Windows allows unprivileged users to escalate privileges to SYSTEM level without needing admin rights, effectively enabling them to execute code within a privileged environment. The vulnerability stems from flaws in the InstallService process and allows DLL injections via a modifiable registry map. Microsoft has released a patch for this vulnerability as part of its July Patch Tuesday updates. Users are urged to apply these updates promptly as public exploit code has been made available, increasing the risk of exploitation.
Public Exploit Code Released for CVE-2026-50343, a Windows InstallService Flaw That Grants SYSTEM Privileges
CyberSIXT Evidence Panel
Article by CyberSIXT