patch tuesday

CVE-2026-50321 is a high-severity elevation-of-privilege vulnerability in the Windows USB driver that can let an authenticated local attacker gain extensive control of an affected PC or server. Microsoft addressed the flaw in its July 14, 2026 security updates across Windows 10, Windows 11, and...

CVE-2026-50343, an elevation-of-privilege vulnerability in Microsoft Install Service, has been fixed in Microsoft’s July 14, 2026 security updates for supported Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025 systems. The flaw carries a CVSS 3.1 base...

Microsoft fixed CVE-2026-50341, a Windows NTFS information-disclosure vulnerability that can let a locally authenticated attacker expose sensitive data through a buffer over-read. The flaw affects supported Windows client and server releases, including Windows 11 24H2 and 25H2, Windows Server...

CVE-2026-50327 is a high-severity Windows Media vulnerability that can let an authenticated attacker execute code through a heap-based buffer overflow. Microsoft released the correction on July 14, 2026, for Windows 11 versions 24H2, 25H2, and 26H1, as well as Windows Server 2025 and Server...

Microsoft has patched CVE-2026-50313, a high-severity heap-based buffer overflow in Windows NTFS that could let an unauthenticated attacker run code after a user interacts with malicious content. The fix arrived in the July 14, 2026 security updates for supported Windows 10, Windows 11, and...

Microsoft has fixed CVE-2026-50419, a Windows Kernel information-disclosure vulnerability that allows a locally authenticated attacker to expose sensitive information. The flaw was published on July 14, 2026, as part of Microsoft’s July Patch Tuesday release and affects supported Windows 11...

Microsoft has patched CVE-2026-50304, a remotely reachable denial-of-service vulnerability in Active Directory Federation Services that requires neither authentication nor user interaction. Organizations still operating AD FS should deploy the July 14, 2026 Windows security updates promptly...

CVE-2026-50392, a newly patched use-after-free flaw in Windows Secure Kernel Mode, can let an authorized local attacker elevate privileges on Windows 11 and Windows Server 2025. Microsoft rates the vulnerability Critical, making the July 14, 2026 security updates the required fix for affected...

Microsoft has patched CVE-2026-50329, an Important-rated elevation-of-privilege vulnerability associated with the Windows Desktop Window Manager Core Library, across supported Windows 10, Windows 11, and Windows Server releases. The flaw carries a CVSS 3.1 base score of 7.8 and could let an...

Microsoft has fixed CVE-2026-50305, a high-severity local privilege-escalation vulnerability in the Microsoft Brokering File System affecting Windows 11 24H2, Windows 11 25H2, Windows 11 26H1, and Windows Server 2025. Administrators should deploy the relevant cumulative security update and...

CVE-2026-50372, a Windows Redirected Drive Buffering elevation-of-privilege vulnerability, was addressed in Microsoft’s July 14, 2026 security updates across supported Windows 11, Windows 10, and Windows Server releases. The flaw carries a CVSS 3.1 score of 7.0 and could let a low-privileged...

CVE-2026-50332 is a Windows Kernel elevation-of-privilege vulnerability that Microsoft patched on July 14, 2026, across supported editions of Windows 10, Windows 11, and Windows Server. The flaw carries a CVSS 3.1 base score of 7.8 and an Important severity rating, making July’s cumulative...

Microsoft’s July 14, 2026 security updates address CVE-2026-50303, a Windows Key Guard vulnerability that can let a locally authenticated attacker bypass a security feature and expose confidential information. The flaw affects supported Windows 10, Windows 11, Windows Server 2019, Windows Server...

Microsoft has patched CVE-2026-50300, an information-disclosure vulnerability associated with the Windows Desktop Window Manager Core Library, in the July 14, 2026 security updates. The flaw requires an attacker to already have local access and valid authorization, but successful exploitation...

CVE-2026-50350 exposes sensitive information through the Windows Trusted Runtime Interface Driver, with fixes delivered across Windows 10, Windows 11, and Windows Server 2025. Microsoft published the vulnerability on July 14, 2026, as part of its monthly security release, and administrators...

CVE-2026-50384, a Windows Clip Service elevation-of-privilege vulnerability, is fixed in Microsoft’s July 14, 2026 security updates for supported Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025 systems. The flaw carries a CVSS 3.1 score of 7.0 and could...

Microsoft has fixed CVE-2026-50354, a Windows Kernel use-after-free vulnerability that can let a locally authenticated attacker elevate privileges. The flaw carries a CVSS 3.1 score of 7.1 and affects supported Windows 10, Windows 11, and Windows Server releases, making the July 14, 2026...

CVE-2026-50316, a Windows Kernel information-disclosure vulnerability, was fixed in Microsoft’s July 14, 2026 security updates and affects supported Windows 10, Windows 11, Windows Server 2022, and Windows Server 2025 installations. The flaw can allow an authorized local attacker to recover...

CVE-2026-49808 is a Windows Kernel elevation-of-privilege vulnerability fixed in Microsoft’s July 14, 2026 security updates for Windows 11 and Windows Server 2025. Administrators should deploy the applicable cumulative update rather than treating the flaw’s “Exploitation Less Likely” assessment...

CVE-2026-50298, an elevation-of-privilege vulnerability in the Windows Spaceport.sys storage driver, was patched in Microsoft’s July 14, 2026 security updates. The flaw affects supported Windows 11 and Windows Server releases, plus Windows 10 systems still receiving security servicing, and can...