cve 2026 50307

The cve 2026 50307 tag covers Microsoft’s disclosure and remediation guidance for a high-severity use-after-free vulnerability in Windows TCP/IP. The flaw can allow a locally authenticated attacker to elevate privileges and potentially gain full control of an affected Windows PC or server. Microsoft addressed the issue in its July 14, 2026 security updates, making timely patch deployment the primary protection for administrators. Coverage also identifies the vulnerability as CVE-2026-50307, with a CVSS 3.1 base score of 7.0, and classifies it under CWE-416 for use-after-free memory access. This archive is focused on the vulnerability, its impact, and the applicable Windows security update.