cve-2026-50489

The cve-2026-50489 tag covers Microsoft’s July 14, 2026 security update for a high-severity elevation-of-privilege vulnerability in Windows Win32k. The flaw is described as a heap-based buffer overflow affecting supported Windows client and server releases. Successful local exploitation could allow an attacker to cross a security boundary and gain substantially greater control of a system. Coverage focuses on verifying that devices have reached the fixed July build level after applying Microsoft’s updates. The vulnerability carries a CVSS 3.1 base score of 8.8, while the related National Vulnerability Database record was still awaiting enrichment when the source was published.