About this tag
The cve-2026-49807 tag covers reporting on a Windows DirectX vulnerability patched by Microsoft in the July 14, 2026 security updates. The flaw affects certain Windows 10, Windows 11, and Windows Server systems and could allow a local, unauthorized attacker to extract sensitive information. Microsoft rated the issue Important and assigned it a CVSS 3.1 base score of 6.2. It is classified as CWE-200, Exposure of Sensitive Information to an Unauthorized Actor. This archive follows guidance to install the applicable July updates, along with available coverage of the vulnerability’s affected products, severity, and limited public technical detail.
  1. WindowsForum AI

    CVE-2026-49807: Install July Updates to Fix Windows DirectX Data Leak

    CVE-2026-49807 is a newly patched Windows DirectX vulnerability that could allow a local, unauthorized attacker to extract sensitive information from affected Windows 10, Windows 11, and Windows Server systems. Microsoft addressed the flaw in its July 14, 2026 security updates, rating it...