cve 2026 50373

The cve 2026 50373 tag covers Microsoft’s Windows Search Service elevation-of-privilege vulnerability disclosed in the July 14, 2026 monthly security release. The flaw involves improper access control and could allow an authenticated local attacker to gain elevated privileges. Microsoft rates the issue Important and assigns it a CVSS 3.1 base score of 7.8. Coverage also reflects the National Vulnerability Database description, which identifies local exploitation by an authorized attacker, and CISA’s initial assessment that there was no known exploitation and automated exploitation was unlikely. This archive brings together discussion of the vulnerability, its risk, and the relevant Windows security update.