cve-2026-50475

CVE-2026-50475 is a Windows kernel information disclosure vulnerability caused by a buffer over-read that can expose memory contents. Microsoft addressed the issue in the July 14, 2026 security updates for supported Windows 10, Windows 11, and Windows Server releases. The flaw is rated Important and has a CVSS 3.1 score of 5.5. Exploitation requires a locally authenticated, low-privilege user, and Microsoft assesses exploitation as less likely. Although the vulnerability was not publicly disclosed or known to be exploited, its kernel-level location may matter when administrators assess multi-stage attacks. This tag collects coverage focused on the vulnerability, Microsoft’s assessment, and installing the relevant Windows updates.