cve 2026 49801

The cve 2026 49801 tag covers discussion of Microsoft’s July 2026 security updates for a Windows SMB information-disclosure vulnerability. The flaw involves an uninitialized resource and may allow a signed-in attacker to obtain sensitive information from local system memory. Reported affected products include multiple generations of Windows 10, Windows 11, and Windows Server. Microsoft rates the issue Medium severity with a CVSS 3.1 score of 5.5. Tagged coverage focuses on the July 14 cumulative updates as the practical fix for most installations, along with the vulnerability’s SMB impact, affected Windows versions, and guidance for applying the relevant security updates.