cve 2026 50505

The cve 2026 50505 tag covers Microsoft’s July 14, 2026 security update for a Windows Message Queuing Service (MSMQ) remote-code-execution vulnerability. Identified as a use-after-free memory flaw, CVE-2026-50505 affects supported Windows client and server releases where MSMQ is present. Microsoft assigned the vulnerability a CVSS 3.1 score of 7.5 and rated it Important. Exploitation requires an authorized attacker with low-level privileges and high attack complexity, but does not require user interaction. This tag is relevant to administrators managing MSMQ environments, including those reviewing exposure, deploying the July cumulative updates, and verifying that affected systems have received the security fix.