cve 2026 50298

The cve 2026 50298 tag covers a Windows elevation-of-privilege vulnerability in the Spaceport.sys storage driver. Tagged coverage focuses on Microsoft’s July 14, 2026 security updates, which patched the flaw for supported Windows 11 and Windows Server releases, as well as Windows 10 systems still receiving security servicing. The vulnerability can allow an attacker with physical access to a vulnerable computer to gain full control. Microsoft classifies it as Important and assigns a CVSS 3.1 score of 6.8. The underlying issue is described as an integer overflow or wraparound in Spaceport.sys, making patch status and affected Windows versions central topics.