cve 2026 50449

The cve 2026 50449 tag covers reporting on a Windows Runtime use-after-free vulnerability addressed by Microsoft in the July 14, 2026 cumulative security updates. The flaw could allow a locally authenticated attacker to elevate privileges on supported Windows 10, Windows 11, and Windows Server systems. Microsoft rated the vulnerability Important and assigned it a CVSS 3.1 score of 7.0, while assessing exploitation as less likely. At the time of the fix, CVE-2026-50449 had not been publicly disclosed and was not known to be exploited. This tag provides focused coverage of the security update that resolves the issue and its relevant vulnerability details.