cve-2026-54114

The cve-2026-54114 tag covers Microsoft’s July 2026 security update for a use-after-free vulnerability in Windows Win32k. The flaw is a local elevation-of-privilege issue that could allow a locally authenticated attacker to gain higher permissions on affected Windows 10, Windows 11, and Windows Server systems. Microsoft rated the vulnerability Important and assigned it a CVSS 3.1 score of 7.8. The primary remediation is installing the corresponding July 14, 2026 cumulative update. At release, the vulnerability was described as neither publicly disclosed nor exploited in the wild. This tag page tracks the available coverage of CVE-2026-54114 and its update-based fix.