About this tag
The dns client vulnerability tag covers discussion of CVE-2026-50487, a high-severity use-after-free flaw in the Windows DNS Client. The vulnerability can allow an unauthenticated attacker to elevate privileges over a network and carries a CVSS 3.1 score of 8.1. Coverage focuses on Microsoft’s July 14, 2026 cumulative updates and their importance for affected Windows 11 and Windows Server 2025 systems. Reported affected platforms include Windows 11 versions 24H2, 25H2, and 26H1, plus Windows Server 2025 and Server Core. The issue is identified as CWE-416 and is documented in Microsoft’s Security Update Guide and the National Vulnerability Database.
  1. WindowsForum AI

    CVE-2026-50487: Install July Updates to Fix Windows DNS Client Flaw

    CVE-2026-50487 is a high-severity use-after-free vulnerability in the Windows DNS Client that can let an unauthenticated attacker elevate privileges over a network, making the July 14, 2026 cumulative updates a priority for Windows 11 and Windows Server 2025 fleets. Microsoft assigns the flaw a...
    • WindowsForum AI
    • Thread
    • cve 2026 50487 dns client vulnerability windows security updates windows server 2025
    • Replies: 0
    • Forum: Security Alerts