privilege escalation

Microsoft has patched CVE-2026-50367, an Important-rated elevation-of-privilege vulnerability in the Windows Sensor Data Service that could let a local attacker take complete control of an affected system. The flaw carries a CVSS 3.1 base score of 7.8 and affects supported releases from Windows...

Microsoft has patched CVE-2026-50421, a Windows Connected User Experiences and Telemetry elevation-of-privilege vulnerability that could allow an authenticated local attacker to gain higher privileges. The fix arrived with the July 14, 2026 security updates and applies across supported Windows...

CVE-2026-50422, a newly patched Windows NTFS elevation-of-privilege vulnerability, allows a locally authenticated attacker to gain higher privileges through an out-of-bounds read in the file-system component. Microsoft released the fix on July 14, 2026, as part of its monthly security updates...

CVE-2026-50427 exposes supported Windows 10, Windows 11, and Windows Server installations to a local elevation-of-privilege attack through Content Delivery Manager, with Microsoft rating the flaw High severity at CVSS 7.8. Administrators should deploy the July 14, 2026 security updates and...

CVE-2026-50413 is a high-severity Windows Runtime vulnerability that can let a locally authenticated attacker elevate privileges, potentially gaining extensive control over an affected Windows 11 or Windows Server 2025 system. Microsoft addressed the flaw through cumulative updates associated...

CVE-2026-50385 is a high-severity Windows Runtime race-condition vulnerability that can let a locally authenticated attacker elevate privileges, with Windows 11 versions 24H2 and 25H2 and Windows Server 2025 requiring the July 14, 2026 security updates. Microsoft assigned the flaw a CVSS 3.1...

CVE-2026-50454 is a high-severity elevation-of-privilege vulnerability in Windows User Interface Core that can let an authenticated local attacker gain substantially broader control of an affected PC or server. Microsoft addressed the flaw in security updates covering Windows 11 versions 24H2...

CVE-2026-50469 is a newly patched Windows Projected File System vulnerability that can let a locally authenticated attacker elevate privileges, potentially gaining complete control over a compromised machine. Microsoft released the fix on July 14, 2026, assigning the flaw a CVSS 3.1 score of 7.8...

Microsoft has fixed CVE-2026-50369, an Important-rated Windows Remote Desktop Services vulnerability that could let an authenticated attacker elevate privileges across a network. The flaw carries a CVSS 3.1 base score of 8.8 and affects supported Windows client and server releases, including...

CVE-2026-50436 is a newly patched Windows Kernel use-after-free vulnerability that can let a locally authenticated attacker elevate privileges, potentially gaining SYSTEM-level control over an affected PC or server. Microsoft addressed the flaw in its July 14, 2026 security updates for Windows...

CVE-2026-50344, an Important-rated Windows OLE elevation-of-privilege vulnerability, was fixed in Microsoft’s July 14, 2026 security updates and can allow an attacker who already has local access to gain higher privileges. Microsoft assigns the flaw a CVSS 3.1 base score of 7.8, reflecting a...

Microsoft’s July 14, 2026 security updates fix CVE-2026-50387, a high-severity Windows Graphics Device Interface vulnerability that could let a locally authenticated attacker elevate privileges. The flaw affects supported Windows 10, Windows 11, and Windows Server releases, making July’s...

CVE-2026-50405 is a newly patched elevation-of-privilege flaw in the Windows Filtering Platform, the networking subsystem used by Windows Firewall and security software to inspect and control traffic. Microsoft released the fix on July 14, 2026, as part of its monthly security updates and rates...

CVE-2026-50397 is a Windows Kernel use-after-free vulnerability that can let a locally authenticated attacker elevate privileges across supported Windows 10, Windows 11, and Windows Server releases. Microsoft fixed the flaw in its July 14, 2026 security updates, making deployment of the relevant...

CVE-2026-50346, a newly disclosed Windows elevation-of-privilege vulnerability associated with Netlogon RPC, was patched in Microsoft’s July 14, 2026 security updates. Microsoft rates the flaw Important with a CVSS 3.1 score of 7.8, and administrators should treat it as a post-compromise...

CVE-2026-50378, a high-severity elevation-of-privilege vulnerability in Windows Key Guard, has been fixed in Microsoft’s July 14, 2026 security updates. The flaw affects supported Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025 systems, giving...

CVE-2026-50391 is a high-severity Windows Group Policy vulnerability that allows a locally authenticated attacker to elevate privileges, potentially gaining complete control over an affected PC or server. Microsoft fixed the flaw in the July 14, 2026 security updates, and administrators should...

CVE-2026-50433, a Windows Media use-after-free vulnerability fixed in Microsoft’s July 14, 2026 security updates, can let a locally authenticated attacker elevate privileges and gain extensive control over an affected Windows machine. Microsoft rates the flaw Important, with a CVSS 3.1 base...

CVE-2026-50403 is a newly patched Windows Runtime flaw that can let an authenticated local attacker elevate privileges on Windows 11 and Windows Server 2025. Microsoft released the fix on July 14 as part of its July 2026 Patch Tuesday updates, assigning the vulnerability an Important severity...

CVE-2026-50460, a high-severity Windows Runtime vulnerability capable of enabling privilege escalation over a network, is fixed in Microsoft’s July 14, 2026 security updates. The flaw carries a CVSS 3.1 score of 8.1 and affects supported Windows 10, Windows 11, Windows Server 2019, Windows...