privilege escalation

CVE-2026-50491, a newly patched elevation-of-privilege flaw in Windows Code Integrity DLL (ci.dll), affects supported releases from Windows Server 2012 through Windows 11 version 26H1. Microsoft fixed the vulnerability in its July 14, 2026 security updates, and administrators should prioritize...

Microsoft has patched CVE-2026-50490, a Windows Installer use-after-free vulnerability that can let a locally authenticated attacker elevate privileges. The flaw carries a CVSS 3.1 score of 7.0, rated High, and affects Windows 10, Windows 11, and Windows Server releases stretching from Server...

Microsoft has patched CVE-2026-50499, a Windows Print Spooler elevation-of-privilege vulnerability that can let an authenticated local attacker gain higher privileges through a heap-based buffer overflow. The fix arrived with Microsoft’s July 14, 2026 security updates and applies across...

CVE-2026-50488 is a high-severity elevation-of-privilege vulnerability in the Windows Clipboard User Service that can let a locally authenticated attacker gain higher privileges through command injection. Microsoft patched the flaw on July 14, 2026, in cumulative updates for Windows 11 24H2...

Microsoft has fixed CVE-2026-50486, an Important-rated Windows Runtime vulnerability that could let a locally authenticated attacker elevate privileges. The flaw carries a CVSS 3.1 base score of 7.8 and affects supported Windows 10 installations, Windows 11 versions 24H2 through 26H1, and...

CVE-2026-50484, a Windows Kernel elevation-of-privilege vulnerability fixed in Microsoft’s July 14, 2026 security updates, could let a locally authenticated attacker gain higher privileges through a heap-based buffer overflow. The flaw carries a CVSS 3.1 base score of 7.8, making prompt...

Microsoft has patched CVE-2026-50480, a high-severity elevation-of-privilege flaw in the Windows Web Proxy Auto-Discovery Protocol, with the July 14, 2026 security updates. The vulnerability is a heap-based buffer overflow that can let a locally authorized attacker gain higher privileges without...

CVE-2026-50478 is a Windows Kernel use-after-free vulnerability that can let a locally authenticated attacker elevate privileges, making Microsoft’s July 14, 2026 security updates the required fix across supported Windows client and server releases. Microsoft rates the flaw Important, with a...

CVE-2026-50406 is a newly documented Windows Backup Engine vulnerability that allows a locally authenticated attacker to elevate privileges through a use-after-free memory flaw. Microsoft rates the bug Important, assigns it a CVSS 3.1 base score of 7.0, and addresses it through cumulative...

CVE-2026-50450 is a Windows local privilege-escalation vulnerability in the Wireless Wide Area Network Service, fixed by Microsoft in the July 14, 2026 security updates. An attacker who already has low-level access to an affected PC or server could exploit a race condition to cross a security...

Microsoft has fixed CVE-2026-50476, an Important-rated elevation-of-privilege vulnerability in the Windows Network Connections Service, through the July 14, 2026 security updates. The flaw spans supported Windows 11 releases, several Windows 10 servicing branches, and Windows Server versions...

CVE-2026-50458 is a high-severity local privilege-escalation vulnerability in the Microsoft Brokering File System, fixed for Windows 11 versions 24H2 and 25H2 and Windows Server 2025 in Microsoft’s July 14, 2026 security updates. An authenticated attacker who already has low-privilege access...

CVE-2026-50444 exposes Windows Server Update Services to network-based privilege escalation, allowing an authenticated attacker with limited permissions to potentially gain extensive control of an affected server. Microsoft rated the vulnerability Critical, assigned it a CVSS 3.1 score of 8.8...

Microsoft PC Manager versions earlier than 3.22.1.0 contain a high-severity local privilege-escalation vulnerability that can let an authenticated attacker gain elevated access through improper handling of file-system links. Microsoft disclosed CVE-2026-50438 on July 14, 2026, and users running...

CVE-2026-50457 is a high-severity Windows Runtime vulnerability that can let a locally authenticated attacker elevate privileges through a use-after-free memory error. Microsoft addressed the flaw in security updates released on July 14, 2026, covering Windows 11 24H2, 25H2 and 26H1, supported...

CVE-2026-50462, an elevation-of-privilege flaw in the Windows Ancillary Function Driver for WinSock, was patched in Microsoft’s July 14, 2026 security updates and should be treated as a priority on multi-user endpoints, servers, and systems where an attacker could gain an initial low-privilege...

CVE-2026-50435, a Windows Overlay Filter privilege-escalation flaw rated 7.8 out of 10, was fixed in Microsoft’s July 14, 2026 security updates. The vulnerability requires an attacker to have local access and low-level privileges, but successful exploitation could provide control equivalent to a...

Microsoft has patched CVE-2026-50402, a high-severity elevation-of-privilege vulnerability in Windows NTFS that could let an attacker with existing local access gain greater control of a system. The flaw carries a CVSS 3.1 score of 7.8 and affects supported Windows client and server releases...

Microsoft has fixed CVE-2026-50466, a Windows Brokering File System elevation-of-privilege vulnerability that could let a locally authenticated attacker turn limited access into broad control of an affected Windows 11 or Windows Server 2025 machine. The correction arrived in Microsoft’s July 14...

CVE-2026-50451 exposes a missing authentication check in Windows Routing and Remote Access Service (RRAS), allowing a signed-in attacker with low-level privileges to elevate access on an affected machine. Microsoft released the fix on July 14, 2026, rating the vulnerability Important with a CVSS...