cve 2026 50486

The cve 2026 50486 tag covers Microsoft’s July 2026 security update for an Important-rated Windows Runtime vulnerability that could enable local privilege escalation. The flaw is a use-after-free memory-management issue with a CVSS 3.1 base score of 7.8. Exploitation requires local access and existing low-level privileges, but no additional user interaction after an attack begins. The affected systems include supported Windows 10 installations, Windows 11 versions 24H2 through 26H1, and Windows Server 2025. Microsoft reported that the vulnerability was not publicly disclosed before the update and had not reported exploitation at the time of the advisory.