cve 2026 54995

CVE 2026 54995 is a critical Windows remote code execution vulnerability in the Reliable Multicast Transport Driver, also known as RMCAST. Microsoft addressed the issue in the July 14, 2026 security updates. The flaw is described as a use-after-free memory error and can allow an unauthenticated attacker to execute code by sending malicious network traffic to a vulnerable Windows system. It is especially relevant to machines that use Reliable Multicast. This tag page collects coverage of the vulnerability, its CVSS 3.1 base score of 8.1, Microsoft’s security advisory, and the importance of promptly deploying the applicable Windows security updates.