cve 2026 54989

The cve 2026 54989 tag covers Microsoft’s Important-rated elevation-of-privilege vulnerability in the Windows Quality Windows Audio/Video Experience service, commonly known as QWAVE. The flaw affects supported Windows client and server installations and was addressed in Microsoft’s July 14, 2026 security updates, released as part of the July 2026 Patch Tuesday cycle. Coverage explains the vulnerability’s CVSS 3.1 base score of 7.0, its local privilege-escalation impact, and why administrators should install the applicable updates. Microsoft reported that the issue was not publicly disclosed and was not known to have been exploited before patches became available.