cve 2026 50366

The cve 2026 50366 tag covers Microsoft’s July 14, 2026 security updates for a denial-of-service vulnerability in Windows Active Directory Domain Services. The flaw is described as a null-pointer dereference that an authenticated attacker can trigger remotely over a network, without user interaction, potentially disrupting a Windows domain controller’s availability. Content in this tag focuses on the risk to domain controller fleets and the need for administrators to test and deploy the July cumulative updates. It also references details from Microsoft’s Security Update Guide and the National Vulnerability Database, including the vulnerability’s network-based attack conditions and impact on AD DS operations.