patch tuesday

Microsoft has fixed CVE-2026-50398, an Important-rated Windows Media elevation-of-privilege vulnerability that can be exploited by an authenticated attacker across a network. The flaw carries a CVSS 3.1 base score of 8.8 and can expose the confidentiality, integrity, and availability of a...

CVE-2026-50336 is a Windows Media elevation-of-privilege vulnerability fixed through Microsoft’s July 14, 2026 security release, with supported Windows 11 systems receiving the correction through their cumulative updates. The flaw carries a CVSS 3.1 base score of 7.8, rated High, and can allow a...

Microsoft has fixed CVE-2026-50371, an Important-rated elevation-of-privilege vulnerability in the Windows LUA File Virtualization Filter Driver, through the July 14, 2026 security updates. The flaw spans supported Windows client and server releases, and successful exploitation could let an...

Microsoft has fixed CVE-2026-50449, a Windows Runtime use-after-free vulnerability that could let a locally authenticated attacker elevate privileges on supported Windows 10, Windows 11, and Windows Server systems. The flaw carries a CVSS 3.1 score of 7.0 and is addressed through the cumulative...

CVE-2026-50388 is a high-severity Windows NTFS code-execution vulnerability fixed in Microsoft’s July 14, 2026 security updates, affecting supported Windows 10, Windows 11, and Windows Server releases. Although Microsoft’s advisory calls it a Windows NTFS Remote Code Execution Vulnerability, its...

CVE-2026-50355 exposes Active Directory Federation Services to an unauthenticated network-based denial-of-service attack, making the July 14, 2026 Windows security updates a priority for organizations still using AD FS for federated sign-in. Microsoft rates the vulnerability Important with a...

Microsoft has fixed CVE-2026-50416, a Win32k information-disclosure vulnerability affecting current Windows 11 releases and Windows Server 2025. The flaw requires local access and existing authorization, but administrators should still deploy the July 14, 2026 cumulative updates because Win32k...

CVE-2026-50340, a high-severity Windows Runtime elevation-of-privilege flaw, is fixed in Microsoft’s July 14, 2026 security updates for Windows 11 and Windows Server 2025. The vulnerability carries a CVSS 3.1 score of 8.5 and could let an authenticated attacker elevate privileges through a...

CVE-2026-50317 is a high-severity Windows privilege-escalation vulnerability that can let a locally authenticated attacker gain elevated rights through a race condition and use-after-free flaw. Microsoft addressed it in the July 14, 2026 security updates for Windows 11 24H2, Windows 11 25H2...

Microsoft has fixed CVE-2026-50361, a high-severity elevation-of-privilege vulnerability in the Microsoft Brokering File System affecting Windows 11 24H2, Windows 11 25H2, selected Windows 11 26H1 devices, and Windows Server 2025. An authenticated local attacker could exploit the flaw to gain...

Microsoft has fixed CVE-2026-50375, an Important-rated elevation-of-privilege vulnerability in the Windows DirectX Graphics Kernel, through the July 14, 2026 security updates. The flaw affects supported Windows 10, Windows 11, and Windows Server releases and could allow an attacker who already...

CVE-2026-50335 is a high-severity Windows elevation-of-privilege vulnerability fixed in Microsoft’s July 14, 2026 security updates. The flaw affects supported Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025 releases, giving administrators another reason...

Microsoft has fixed CVE-2026-50322, an Important-rated Windows Runtime vulnerability that can let a locally authenticated attacker elevate privileges and gain high-impact control over an affected PC or server. The correction arrived with the July 14, 2026 cumulative updates for Windows 11 24H2...

Microsoft has patched CVE-2026-50345, an Important-rated Windows Runtime elevation-of-privilege vulnerability affecting Windows 11 versions 24H2, 25H2, and 26H1, along with Windows Server 2025. Administrators running Windows 11 24H2 or 25H2 should deploy the July 14, 2026 cumulative update...

Microsoft has patched CVE-2026-50348, an Important-rated Windows Runtime vulnerability that could let an unauthenticated attacker elevate privileges over a network. The flaw affects supported Windows 10, Windows 11, and Windows Server releases, making the July 14, 2026 cumulative updates the...

CVE-2026-50324 exposes Active Directory Federation Services to an unauthenticated network-based denial-of-service attack, allowing a remote attacker to disrupt federation and potentially block users from signing in to dependent applications. Microsoft fixed the vulnerability in its July 14, 2026...

CVE-2026-50310 has been fixed across supported Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025 releases through Microsoft’s July 14, 2026 security updates. The flaw is a local information-disclosure vulnerability in Windows Human Interface Device...

CVE-2026-50430, an Important-rated information disclosure vulnerability in Windows Push Notifications, was fixed in Microsoft’s July 14, 2026 security updates across supported Windows 10, Windows 11, and Windows Server releases. The flaw requires an attacker to have local access and valid...

Microsoft has patched CVE-2026-50315, a Windows Image Acquisition elevation-of-privilege vulnerability affecting supported Windows 11 releases and Windows Server 2025. The flaw carries a CVSS 3.1 score of 7.8 and could let a locally authenticated attacker gain higher privileges without requiring...

Microsoft has patched CVE-2026-50425, a high-severity Windows privilege-escalation vulnerability that could let an attacker with an existing local account obtain greater control over a compromised PC or server. The fix is included in the July 14, 2026 security updates for Windows 10, Windows 11...