cve 2026 49798

The cve 2026 49798 tag covers reporting and discussion of a Windows Kernel use-after-free vulnerability that can enable local elevation of privilege. The flaw involves unsafe reuse of freed kernel memory and may allow an attacker to gain elevated privileges without an existing privileged account. Microsoft patched the issue on July 14, 2026, across supported Windows client and server editions. The vulnerability carries a CVSS score of 9.3 and is rated Important under Microsoft’s severity classification. The National Vulnerability Database identifies the underlying weakness as CWE-416, Use After Free. This page collects related coverage and discussion about the vulnerability, its severity, and Microsoft’s security fix.