cve 2026 49184

The cve 2026 49184 tag covers Microsoft’s July 2026 security fix for an Important-rated Windows NTFS remote code execution vulnerability. The flaw affects supported Windows client and server releases and has a CVSS 3.1 base score of 8.4, with potential impacts to confidentiality, integrity, and availability. It does not require privileges or user interaction to exploit. Microsoft included the fix in the July cumulative Windows security updates and reported that the vulnerability had not been publicly disclosed or exploited when patches shipped. Coverage here focuses on the vulnerability’s severity, affected Windows platforms, Microsoft’s assessment of exploitation risk, and the importance of installing the NTFS update.