patch tuesday

Microsoft has fixed CVE-2026-50689, an Important-rated Windows Clipboard Server vulnerability that could let a low-privileged local attacker elevate privileges on affected Windows 10, Windows 11, and Windows Server installations. The correction arrived with the July 14, 2026 security updates and...

CVE-2026-50685 exposes the Windows DHCP Server service to remote code execution through a double-free memory error, giving administrators another server-side flaw to address in Microsoft’s July 14, 2026 security updates. Microsoft rates the vulnerability Important with a CVSS 3.1 base score of...

CVE-2026-50682 exposes Windows Active Directory to a network-delivered denial-of-service attack, allowing an authenticated user to disrupt an affected system without user interaction. Microsoft fixed the Important-rated vulnerability in its July 14, 2026 security updates, making domain...

CVE-2026-50680, a Critical Windows Hyper-V elevation-of-privilege vulnerability, was fixed in Microsoft’s July 14, 2026 security updates. Administrators running Hyper-V should prioritize the cumulative update because successful exploitation could let an already authorized local attacker cross a...

CVE-2026-50688 is a Windows Win32k elevation-of-privilege vulnerability that can let a locally authenticated attacker gain higher permissions through a kernel use-after-free condition. Microsoft patched the flaw on July 14, 2026, across supported Windows client and server releases, making July’s...

CVE-2026-50679 exposes Windows 11 and Windows Server 2025 systems to a local privilege-escalation attack through a heap-based buffer overflow in the Windows Search component. Microsoft rated the vulnerability Important and addressed it in security updates released on July 14, 2026. The flaw...

Microsoft has patched CVE-2026-50674, an Important-rated use-after-free vulnerability in the Windows USB Print Driver that could let a locally authenticated attacker elevate privileges. The flaw carries a CVSS 3.1 base score of 7.0 and is addressed by the July 14, 2026 Windows security updates...

Microsoft has fixed CVE-2026-50672, an Important-rated Windows NTFS vulnerability that could let a locally authenticated attacker elevate privileges and gain broad control of an affected PC or server. The flaw was disclosed on July 14, 2026, as part of Microsoft’s July Patch Tuesday updates and...

Microsoft has patched CVE-2026-50670, an 8.8-rated Windows Win32k elevation-of-privilege vulnerability that can allow an attacker with existing local access to gain higher privileges. The fix arrived with the July 14, 2026 security updates and applies across supported Windows 10, Windows 11...

CVE-2026-50668, a heap-based buffer overflow affecting Windows storage code, was patched in Microsoft’s July 14, 2026 security updates across supported Windows 10, Windows 11, and Windows Server releases. The flaw can allow an attacker with physical access to elevate privileges without already...

CVE-2026-50655, a Windows Media Foundation remote code execution vulnerability fixed in Microsoft’s July 14, 2026 security updates, can let an unauthenticated attacker run code after a user interacts with malicious media content. The flaw carries a CVSS 3.1 score of 7.8 and affects supported...

CVE-2026-50518 gives an unauthenticated attacker a potential path to remote code execution on Windows DHCP Server, earning Microsoft’s highest practical CVSS rating of 9.8 Critical. The flaw was disclosed with Microsoft’s July 14, 2026 security updates and should move near the front of...

Microsoft has fixed CVE-2026-50509, an elevation-of-privilege vulnerability in the Windows Wireless Wide Area Network Service, through the July 14, 2026 security updates. The flaw carries a CVSS 3.1 base score of 7.8 and could let an authenticated local attacker gain substantially greater...

CVE-2026-50497 exposes sensitive information through Windows Remote Desktop Protocol, affecting supported Windows 10, Windows 11, and Windows Server releases until administrators install Microsoft’s July 14, 2026 security updates. Microsoft rates the flaw Important with a CVSS 3.1 score of 6.5...

Microsoft has patched CVE-2026-50501, a high-severity Windows Resilient File System vulnerability that can allow an unauthenticated attacker to execute code after a user interacts with attacker-controlled content. The flaw affects Windows 11 versions 24H2, 25H2, and 26H1, as well as Windows...

CVE-2026-50491, a newly patched elevation-of-privilege flaw in Windows Code Integrity DLL (ci.dll), affects supported releases from Windows Server 2012 through Windows 11 version 26H1. Microsoft fixed the vulnerability in its July 14, 2026 security updates, and administrators should prioritize...

CVE-2026-50500, a Windows Netlogon elevation-of-privilege vulnerability patched on July 14, 2026, allows an authenticated attacker to gain higher privileges across a network. Microsoft rates the flaw Important with a CVSS 3.1 base score of 7.5, making July’s cumulative Windows updates the...

Additional coverage of this story: CVE-2026-56164 SharePoint Exploit: Patch July 14 Now It emphasizes that exploited SharePoint flaw CVE-2026-56164 has only a 5.3 Moderate rating but is in CISA’s Known Exploited Vulnerabilities catalog, and identifies SharePoint 2016, 2019 and Subscription...

CVE-2026-50488 is a high-severity elevation-of-privilege vulnerability in the Windows Clipboard User Service that can let a locally authenticated attacker gain higher privileges through command injection. Microsoft patched the flaw on July 14, 2026, in cumulative updates for Windows 11 24H2...

Microsoft has fixed CVE-2026-50486, an Important-rated Windows Runtime vulnerability that could let a locally authenticated attacker elevate privileges. The flaw carries a CVSS 3.1 base score of 7.8 and affects supported Windows 10 installations, Windows 11 versions 24H2 through 26H1, and...