cve 2026 50394

The cve 2026 50394 tag tracks coverage of Microsoft’s July 2026 security fix for an Important-rated Windows Media information disclosure vulnerability. The issue affects supported Windows 10, Windows 11, and Windows Server installations and is associated with CWE-200, involving exposure of sensitive information to an unauthorized actor. Microsoft’s July 14 cumulative updates address the flaw. Exploitation requires an attacker to already have local, low-privilege access, but no additional user interaction is required. Coverage also notes the CVSS 3.1 base score of 5.5 and points administrators toward deploying the applicable updates through Microsoft’s security guidance.