cve 2026 50424

This tag covers CVE-2026-50424, a denial-of-service vulnerability affecting Windows Server 2025 domain controllers. The reported flaw allows an unauthenticated attacker to send malicious network traffic that can take a vulnerable domain controller offline. Coverage focuses on Microsoft’s July 14, 2026 security update, KB5099536, and OS build 26100.33158 as the remediation target. The vulnerability is described as an untrusted pointer dereference (CWE-822), with Microsoft rating it Important and assigning a CVSS 3.1 base score of 7.5. This archive provides the available update guidance and context for assessing exposure and prioritizing patching on affected servers.