cve 2026 50347

CVE-2026-50347 is a high-severity remote code execution vulnerability in Windows Data.dll. The flaw involves a heap-based buffer overflow caused by an integer overflow or wraparound and can allow an unauthorized attacker to run code after persuading a user to interact with malicious content. Microsoft assigned the issue a CVSS 3.1 score of 7.8 and addressed it in the July 2026 cumulative security updates. The affected software includes supported Windows 10, Windows 11, and Windows Server releases. This tag collects coverage of the vulnerability, Microsoft’s advisory, and the recommended update deployment for users and administrators.