cve 2026 50327

CVE 2026 50327 is a high-severity Windows Media vulnerability addressed by Microsoft’s July 14, 2026 security updates. The flaw involves a heap-based buffer overflow that can allow authenticated attackers to execute code, and it carries a CVSS 3.1 score of 7.8. Microsoft’s classification does not mean an unauthenticated network attacker can target any reachable Windows PC; the documented scenario requires local access, low privileges, and no additional user interaction. Coverage for this tag focuses on the affected Windows 11 versions 24H2, 25H2, and 26H1, along with Windows Server 2025 and Server Core, and explains the vulnerability’s post-compromise security implications.