cve 2026 58537

CVE 2026 58537 is a Microsoft elevation-of-privilege vulnerability in the NAT Helper Components library, affecting the ipnathlp.dll component. Microsoft identifies it as a use-after-free memory-safety flaw that an authorized attacker could exploit locally to gain elevated privileges. The issue affects supported Windows 11 24H2, 25H2, and 26H1 installations, along with Windows Server 2025, including Server Core. Microsoft addressed the vulnerability in its July 14, 2026 security updates. This tag page tracks coverage of the flaw, its affected Windows and Windows Server versions, the associated security advisory, and the recommended action for administrators: deploying the applicable July cumulative updates.