cve-2026-50483

The cve-2026-50483 tag covers Microsoft’s security response to an information disclosure vulnerability in the Windows Graphics Component. The issue affects unpatched Windows 11 and Windows Server 2025 systems and can expose sensitive information after an attacker gains low-privilege local access. Exploitation does not require user interaction, and the vulnerability has a high confidentiality impact despite its CVSS 3.1 base score of 5.5 and Important severity rating. Microsoft addressed the local disclosure route in its July 14, 2026 security updates. At release, Microsoft reported that the flaw was not publicly disclosed or known to be exploited, while assessing future exploitation as less likely.