[CVE-2026-50343]

July 23, 2026

• Dark Elevator (CVE-2026-50343) — Windows 11 LPE to SYSTEM. A writable plugin map plus a COM class lets a normal user load malicious DLLs into SYSTEM processes; fixed by Microsoft in July 2026 (calif.io). · Vulnerabilities & Exploits

in "Every Frontier Model Tried to Cheat": UK Safety Institute Puts Numbers Behind the OpenAI–Hugging Face Incident