cve 2026 50300

cve 2026 50300 covers Microsoft’s July 2026 security fix for an information-disclosure vulnerability in the Windows Desktop Window Manager Core Library. The issue, tracked as CVE-2026-50300, could expose sensitive data from memory, but exploitation requires local access and valid authorization, with no user interaction required. Microsoft rated the vulnerability Important and assigned it a CVSS 3.1 base score of 5.5. The July 14, 2026 Patch Tuesday update addressed the flaw. At release, Microsoft reported that it was not publicly disclosed and had not been observed in active exploitation, making update deployment the primary focus for affected Windows systems.