cve 2026 50299

The cve 2026 50299 tag covers Microsoft’s July 14, 2026 security update for a vulnerability in Windows Storage Spaces Direct. The flaw is described as an integer overflow or wraparound that can trigger a heap-based buffer overflow and enable unauthenticated code execution. Microsoft rates it Important and assigns a CVSS 3.1 base score of 6.8. Although the impact can affect confidentiality, integrity, and availability without credentials or user interaction, exploitation requires physical access to the affected system. This archive focuses on the vulnerability’s attack conditions, severity, affected Storage Spaces Direct component, and the Microsoft patch that addresses it.