cve-2026-42900

The cve-2026-42900 tag covers Microsoft’s fix for a high-severity Windows App Store elevation-of-privilege vulnerability. The flaw affects supported Windows 10, Windows 11, and Windows Server releases and could allow an unauthorized attacker to gain higher privileges through a network-based attack. Microsoft attributes the issue to a race condition involving concurrent access to a shared resource without proper synchronization. Coverage focuses on the July 14, 2026 security updates released for Patch Tuesday, which provide the required remediation rather than an optional Microsoft Store app refresh. Use this archive to follow related security update and vulnerability information.