cve 2026 50518

The cve 2026 50518 tag covers reporting on a critical remote code execution vulnerability affecting Windows DHCP Server. The flaw is described as a heap-based buffer overflow that can allow an unauthenticated attacker to exploit a network-facing server without credentials or user interaction. Microsoft assigned the issue a CVSS rating of 9.8 Critical and disclosed it with the July 14, 2026 security updates. Coverage also highlights the vulnerability’s CWE-122 classification, Microsoft’s Exploitability Index assessment, and its publication in the National Vulnerability Database. This archive is relevant for administrators reviewing Windows DHCP deployments, prioritizing security updates, and assessing exposure to a potentially severe network-based attack.