patch tuesday

Microsoft has patched CVE-2026-50402, a high-severity elevation-of-privilege vulnerability in Windows NTFS that could let an attacker with existing local access gain greater control of a system. The flaw carries a CVSS 3.1 score of 7.8 and affects supported Windows client and server releases...

Microsoft has fixed CVE-2026-50466, a Windows Brokering File System elevation-of-privilege vulnerability that could let a locally authenticated attacker turn limited access into broad control of an affected Windows 11 or Windows Server 2025 machine. The correction arrived in Microsoft’s July 14...

Microsoft’s July 14, 2026 security updates fix CVE-2026-50455, an Important-rated information disclosure vulnerability in Windows Universal Plug and Play library upnp.dll. The flaw requires an attacker to have local access and low-level privileges, but successful exploitation could expose...

CVE-2026-50383, an Important-rated Windows Print Spooler information-disclosure vulnerability, was patched in Microsoft’s July 14, 2026 security updates. Administrators should deploy the applicable cumulative update, particularly on shared workstations, Remote Desktop Session Hosts, and servers...

Microsoft’s July 14, 2026 security updates fix CVE-2026-50374, a use-after-free flaw in the Windows Cloud Files Mini Filter Driver that can let a locally authorized attacker elevate privileges. The vulnerability reaches Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and...

Microsoft has patched CVE-2026-50421, a Windows Connected User Experiences and Telemetry elevation-of-privilege vulnerability that could allow an authenticated local attacker to gain higher privileges. The fix arrived with the July 14, 2026 security updates and applies across supported Windows...

CVE-2026-50413 is a high-severity Windows Runtime vulnerability that can let a locally authenticated attacker elevate privileges, potentially gaining extensive control over an affected Windows 11 or Windows Server 2025 system. Microsoft addressed the flaw through cumulative updates associated...

CVE-2026-50426, a Windows DNS Server remote code execution vulnerability disclosed by Microsoft on July 14, 2026, puts the July security updates on the priority list for every supported Windows Server machine running the DNS Server role. Because Active Directory domain controllers frequently...

CVE-2026-50436 is a newly patched Windows Kernel use-after-free vulnerability that can let a locally authenticated attacker elevate privileges, potentially gaining SYSTEM-level control over an affected PC or server. Microsoft addressed the flaw in its July 14, 2026 security updates for Windows...

CVE-2026-50352 exposes sensitive information through Windows Cryptographic Services, and Microsoft has shipped the fix in its July 14, 2026 security updates. The flaw affects supported Windows 10, Windows 11, and Windows Server releases, but exploitation requires an attacker who already has...

CVE-2026-50344, an Important-rated Windows OLE elevation-of-privilege vulnerability, was fixed in Microsoft’s July 14, 2026 security updates and can allow an attacker who already has local access to gain higher privileges. Microsoft assigns the flaw a CVSS 3.1 base score of 7.8, reflecting a...

Microsoft has patched CVE-2026-50445, an Important-rated information-disclosure vulnerability in Windows Remote Desktop Protocol that can expose sensitive memory contents to an unauthenticated attacker over a network. The flaw affects supported Windows 10, Windows 11, and Windows Server...

CVE-2026-50334 exposes sensitive information through Windows Push Notifications, but Microsoft says exploitation requires an attacker who already has local access and valid low-level privileges on the target PC. The flaw was disclosed and patched on July 14, 2026, as part of Microsoft’s...

CVE-2026-50448, an Important-rated Windows NTFS code-execution vulnerability, is fixed in Microsoft’s July 14, 2026 security updates and affects supported Windows 10, Windows 11, and Windows Server releases. Despite Microsoft’s “Remote Code Execution” title, the published CVSS data describes a...

CVE-2026-50405 is a newly patched elevation-of-privilege flaw in the Windows Filtering Platform, the networking subsystem used by Windows Firewall and security software to inspect and control traffic. Microsoft released the fix on July 14, 2026, as part of its monthly security updates and rates...

CVE-2026-50378, a high-severity elevation-of-privilege vulnerability in Windows Key Guard, has been fixed in Microsoft’s July 14, 2026 security updates. The flaw affects supported Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025 systems, giving...

CVE-2026-50423 is a high-severity Windows Kernel elevation-of-privilege vulnerability that can let a locally authenticated attacker gain SYSTEM-level control. Microsoft fixed the improper access-control flaw in security updates released on July 14, 2026, and administrators should use patched OS...

CVE-2026-50403 is a newly patched Windows Runtime flaw that can let an authenticated local attacker elevate privileges on Windows 11 and Windows Server 2025. Microsoft released the fix on July 14 as part of its July 2026 Patch Tuesday updates, assigning the vulnerability an Important severity...

CVE-2026-50460, a high-severity Windows Runtime vulnerability capable of enabling privilege escalation over a network, is fixed in Microsoft’s July 14, 2026 security updates. The flaw carries a CVSS 3.1 score of 8.1 and affects supported Windows 10, Windows 11, Windows Server 2019, Windows...

CVE-2026-50414 has been fixed in Microsoft’s July 14, 2026 security updates, closing a Windows Media race condition that could let an authenticated attacker elevate privileges across a network. Microsoft rates the vulnerability Important, assigns it a CVSS 3.1 base score of 7.5, and lists...