cve 2026 50498

The cve 2026 50498 tag covers Microsoft’s July 14, 2026 security update for an Important-rated elevation-of-privilege vulnerability in the Windows Universal Disk Format File System Driver. The issue affects supported Windows 10, Windows 11, and Windows Server releases, including Server Core installations. Microsoft identifies an out-of-bounds read and an integer underflow in the UDFS driver, weaknesses associated with unsafe handling of malformed size or boundary values. The vulnerability has a CVSS 3.1 score of 7.8 and is tracked in Microsoft’s Security Update Guide and the National Vulnerability Database. This page collects related discussion about the flaw, its affected platforms, and the update that addresses it.