cve 2026 50495

CVE 2026 50495 is a Windows DNS Client tampering vulnerability involving improper access control. The issue allows a locally authenticated attacker to alter protected DNS Client behavior, rather than enabling a drive-by DNS attack. Microsoft addressed the flaw in its July 14, 2026 security updates for supported Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025 systems. This tag page collects information about the vulnerability, its affected Windows platforms, and the available Microsoft fix. Microsoft rates CVE 2026 50495 as Important, while its CVSS 3.1 base score of 6.1 places it in the medium-severity range.