cve 2026 49165

The cve 2026 49165 tag covers a Microsoft Windows App Store information disclosure vulnerability affecting supported Windows client and server releases. The flaw can allow an authorized local attacker to disclose information by exploiting an uninitialized resource. Microsoft published the vulnerability on July 14, 2026, assigning it a CVSS 3.1 base score of 7.1 and classifying it under CWE-908, Use of Uninitialized Resource. Coverage focuses on the security updates delivered through the July 2026 Patch Tuesday release and the available fix for the affected Windows App Store component. This archive is relevant to administrators and security teams tracking the issue and its remediation.