cve 2026 50315

The cve 2026 50315 tag covers Microsoft’s security fix for a Windows Image Acquisition (WIA) elevation-of-privilege vulnerability affecting supported Windows 11 releases and Windows Server 2025. The flaw, rated CVSS 3.1 7.8, involves a null-pointer dereference in the subsystem that connects applications with scanners, cameras, and other imaging devices. A locally authenticated attacker could potentially use it to gain higher privileges without requiring another user to interact with malicious content. Coverage focuses on Microsoft’s July 14, 2026 Security Response Center disclosure and the July Patch Tuesday updates that address the vulnerability.