cve-2026-50460

The cve-2026-50460 tag tracks coverage of a high-severity Windows Runtime vulnerability addressed by Microsoft in the July 14, 2026 security updates. The flaw involves a race condition and use-after-free behavior and could allow an unauthenticated attacker to achieve privilege escalation over a network without user interaction. It carries a CVSS 3.1 score of 8.1 and affects supported installations of Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025. This archive focuses on the vulnerability’s impact, affected Microsoft platforms, and the security update that resolves it, based on details from Microsoft’s Security Update Guide and the National Vulnerability Database.