cve 2026 50308

The cve 2026 50308 tag covers reporting on an Important-rated Windows NTFS remote code execution vulnerability addressed in Microsoft’s July 14, 2026 security updates. The flaw is described as an integer underflow in the NTFS parser and can allow code execution when a user interacts with attacker-controlled content. Coverage emphasizes that this is a malicious-file risk rather than a zero-click network attack, with potential relevance to downloaded disk images, removable media, archives, and other untrusted files. The vulnerability carries a CVSS 3.1 base score of 7.8, making timely patching especially important for Windows workstations that routinely process externally sourced content.