cve 2026 55014

The cve 2026 55014 tag covers Microsoft’s disclosure of a 7.8-rated elevation-of-privilege vulnerability in Windows Remote Help. The issue is an improper access-control flaw that can allow an authorized attacker to elevate privileges locally, with low attack complexity, low privileges required, and no user interaction. Affected client versions range from 5.0.0.0 up to, but not including, 5.2.1037.0. Organizations using the Intune-connected support tool should verify that both help-desk and end-user devices are running Remote Help 5.2.1037.0. The vulnerability was published by the Microsoft Security Response Center on July 14, 2026.