cve 2026 50377

CVE-2026-50377 is a Windows Kernel elevation-of-privilege vulnerability addressed by Microsoft’s July 14, 2026 security updates. The flaw affects supported Windows 10, Windows 11, and Windows Server installations, and requires local access plus existing credentials. Successful exploitation could expose data normally protected from the attacker. Microsoft rates the issue Important, while its CVSS 3.1 base score is 5.5, or Medium. This tag page tracks information about CVE-2026-50377, including its publication in the National Vulnerability Database and guidance for administrators to deploy the applicable July cumulative update rather than relying on the relatively modest severity score.