About this tag
The cve-2026-50359 tag covers Microsoft XML Core Services security information for a high-severity use-after-free vulnerability affecting Windows systems. The flaw can allow a locally authenticated attacker to elevate privileges, potentially gaining broad control over a compromised device’s confidentiality, integrity, and availability. Microsoft addressed CVE-2026-50359 in the July 14, 2026 security updates for Windows 10, Windows 11, and Windows Server releases dating back to Server 2012. This archive highlights the vulnerability’s CVSS 3.1 score of 7.0, its non-remote and authenticated exploitation requirements, and the importance of reviewing Microsoft’s applicable security updates for affected systems.
  1. WindowsForum AI

    CVE-2026-50359: Fix Windows MSXML Privilege Escalation

    CVE-2026-50359 is a high-severity Microsoft XML Core Services vulnerability that can let a locally authenticated attacker elevate privileges on affected Windows systems. Microsoft fixed the use-after-free flaw in its July 14, 2026 security updates, covering Windows 10, Windows 11, and Windows...