cve 2026 50688

The cve 2026 50688 tag covers reporting on a Windows Win32k elevation-of-privilege vulnerability addressed by Microsoft in the July 14, 2026 cumulative updates. The flaw involves a kernel use-after-free condition that could allow a locally authenticated attacker to gain higher permissions. Coverage includes the affected supported Windows client and server releases, Microsoft’s Important severity rating, and its CVSS 3.1 base score of 7.8. The available guidance identifies installing the July updates as the direct remediation. Microsoft assessed exploitation as less likely and reported that the vulnerability was not publicly disclosed or exploited in the wild when the updates shipped.