cve 2026 50354

The cve 2026 50354 tag covers Microsoft’s fix for a Windows Kernel use-after-free vulnerability that can allow a locally authenticated attacker to elevate privileges. The issue affects supported Windows 10, Windows 11, and Windows Server releases and carries a CVSS 3.1 score of 7.1. Microsoft rates it Important rather than Critical, with exploitation requiring local access and low privileges but no user interaction after those conditions are met. The practical remediation is to install the July 14, 2026 security updates released for July 2026 Patch Tuesday. This archive follows coverage of the vulnerability, its impact, and Microsoft’s update guidance.