patch tuesday

CVE-2026-49807 is a newly patched Windows DirectX vulnerability that could allow a local, unauthorized attacker to extract sensitive information from affected Windows 10, Windows 11, and Windows Server systems. Microsoft addressed the flaw in its July 14, 2026 security updates, rating it...

CVE-2026-50351, an elevation-of-privilege flaw in Windows Audio Compression Manager, is fixed by Microsoft’s July 14, 2026 security updates. The vulnerability carries a CVSS 3.1 base score of 7.8 and affects supported Windows 10, Windows 11, and Windows Server installations, making the monthly...

CVE-2026-49803 exposes the Windows AppX Deployment Service to a local elevation-of-privilege attack across supported Windows 10, Windows 11, and Windows Server releases. Microsoft fixed the flaw in its July 14, 2026 security updates, making those cumulative patches the primary protection for...

Microsoft’s July 14, 2026 security updates fix CVE-2026-49806, an Important-rated elevation-of-privilege vulnerability in the Windows USB Print Driver that can let a locally authenticated attacker obtain higher privileges. The flaw affects supported Windows 11 releases and Windows Server 2025...

Microsoft’s July 2026 security updates fix CVE-2026-49801, a Windows SMB information-disclosure vulnerability that can allow a signed-in attacker to obtain sensitive data from local system memory. The flaw affects multiple generations of Windows 10, Windows 11, and Windows Server, making the...

Microsoft has patched CVE-2026-50333, an elevation-of-privilege vulnerability in the Windows Spaceport.sys driver that could let an authenticated local attacker gain higher permissions. The fix arrived on July 14, 2026, through the monthly Windows security updates and should be treated as a...

CVE-2026-49798 is a newly patched Windows Kernel use-after-free vulnerability that can let a local attacker gain elevated privileges without already holding a privileged account. Microsoft released the fix on July 14, 2026, across supported Windows client and server editions, assigning the flaw...

CVE-2026-49797, a heap-based buffer overflow in Windows NTFS, was fixed in Microsoft’s July 14, 2026 security updates and can allow an unauthenticated attacker to execute code after a user interacts with malicious content. Despite Microsoft’s “Windows NTFS Remote Code Execution Vulnerability”...

CVE-2026-49795, a newly patched Windows Kernel elevation-of-privilege vulnerability, allows a local attacker with an existing low-privilege account to exploit a use-after-free condition and cross a Windows security boundary. Microsoft rates the flaw Important, but its CVSS 3.1 base score of 8.8...

Microsoft’s July 14, 2026 security updates fix CVE-2026-49796, a Windows GDI+ heap-based buffer overflow that can lead to code execution after a user interacts with malicious content. The vulnerability reaches across supported Windows 10, Windows 11, and Windows Server releases, making the...

Microsoft’s July 14, 2026 security updates fix CVE-2026-49794, an information-disclosure flaw in the Windows USB Audio Class driver, usbaudio.sys. The vulnerability requires physical access, but it spans supported Windows 10, Windows 11, and Windows Server releases, making the cumulative updates...

CVE-2026-49792, an Important-rated flaw in the Windows Resilient File System, can let an authenticated local attacker execute code on affected Windows 10, Windows 11, and Windows Server systems. Microsoft addressed the vulnerability in its July 14, 2026 security updates, and administrators...

Microsoft has fixed CVE-2026-49791, an Important-rated elevation-of-privilege vulnerability in Windows Routing and Remote Access Service that could let a low-privileged local attacker manipulate file access and gain greater control of an affected system. The correction arrived with the July 14...

Microsoft has patched CVE-2026-49790, a high-severity elevation-of-privilege vulnerability in the Windows Universal Disk Format File System driver, across supported Windows 10, Windows 11, and Windows Server releases. Administrators should deploy the July 14, 2026 cumulative security updates and...

Microsoft has patched CVE-2026-49183, a Windows Clipboard Server elevation-of-privilege vulnerability affecting supported Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025 releases. Administrators should deploy the July 14, 2026 cumulative security...

Microsoft has patched CVE-2026-49184, an Important-rated Windows NTFS remote code execution vulnerability affecting supported Windows client and server releases. The flaw carries a CVSS 3.1 base score of 8.4 and can compromise confidentiality, integrity, and availability without requiring...

Microsoft has fixed CVE-2026-49178, a Windows Active Directory Domain Services remote code execution vulnerability that could let an authenticated attacker trigger a heap-based buffer overflow across a network. The flaw carries a CVSS 3.1 score of 8.8 and should be treated as a priority update...

CVE-2026-47304, an Important-rated .NET security feature bypass, was fixed in Microsoft’s July 14, 2026 security releases for .NET 8, .NET 9, .NET 10, .NET Framework, and supported Visual Studio editions. The flaw carries a CVSS 3.1 score of 8.1 and could let an unauthenticated remote attacker...

Microsoft has patched CVE-2026-40400, a high-severity Windows PowerShell remote code execution vulnerability affecting supported Windows 10, Windows 11, and Windows Server releases. Administrators should deploy the July 14, 2026 cumulative security updates, particularly on systems where users or...

CVE-2026-40422, a Windows File Explorer information-disclosure vulnerability, is fixed in Microsoft’s July 14, 2026 security updates and should be treated as a routine but necessary patching item across managed Windows fleets. Microsoft rates the flaw Important, with a CVSS 3.1 base score of...