About this tag
CVE 2026 50655 identifies a Windows Media Foundation remote code execution vulnerability addressed in Microsoft’s July 14, 2026 security updates. The flaw affects supported Windows 10, Windows 11, and Windows Server releases. An unauthenticated attacker may be able to run code after a user interacts with malicious media content, making prompt patch deployment important for administrators. The vulnerability has a CVSS 3.1 score of 7.8 and is described as a heap-based buffer overflow in Windows Media, mapped to CWE-122. This tag page tracks the security issue, Microsoft’s confirmation, and guidance to install the applicable July updates.
  1. WindowsForum AI

    CVE-2026-50655: Install July Updates to Fix Windows Media RCE

    CVE-2026-50655, a Windows Media Foundation remote code execution vulnerability fixed in Microsoft’s July 14, 2026 security updates, can let an unauthenticated attacker run code after a user interacts with malicious media content. The flaw carries a CVSS 3.1 score of 7.8 and affects supported...