privilege escalation

Microsoft has fixed CVE-2026-50379, a Windows Media race-condition vulnerability that could let an authenticated attacker gain elevated privileges across a network. The flaw carries a CVSS 3.1 base score of 7.5 and affects Windows 11 versions 24H2, 25H2, and 26H1 on x64 and Arm64 systems...

CVE-2026-50414 has been fixed in Microsoft’s July 14, 2026 security updates, closing a Windows Media race condition that could let an authenticated attacker elevate privileges across a network. Microsoft rates the vulnerability Important, assigns it a CVSS 3.1 base score of 7.5, and lists...

Microsoft has fixed CVE-2026-50371, an Important-rated elevation-of-privilege vulnerability in the Windows LUA File Virtualization Filter Driver, through the July 14, 2026 security updates. The flaw spans supported Windows client and server releases, and successful exploitation could let an...

Microsoft has fixed CVE-2026-50449, a Windows Runtime use-after-free vulnerability that could let a locally authenticated attacker elevate privileges on supported Windows 10, Windows 11, and Windows Server systems. The flaw carries a CVSS 3.1 score of 7.0 and is addressed through the cumulative...

CVE-2026-50410 is a newly patched Windows Runtime elevation-of-privilege vulnerability that can let a locally authenticated attacker gain higher permissions through a use-after-free memory error. Microsoft classified the flaw as Important and assigned it a CVSS 3.1 base score of 7.0, making July...

CVE-2026-50373 exposes an improper access-control flaw in the Windows Search component that can let an authenticated local attacker gain elevated privileges. Microsoft published the vulnerability on July 14, 2026, as part of its monthly security release, rating it Important with a CVSS 3.1 base...

CVE-2026-50358, a Windows Media use-after-free vulnerability, can let a locally authenticated attacker elevate privileges on affected Windows 10, Windows 11, and Windows Server systems. Microsoft addressed the flaw in its July 14, 2026 security updates and rates it Important, with a CVSS 3.1...

CVE-2026-50404 is a high-severity Windows Media vulnerability that can let a locally authenticated attacker elevate privileges on Windows 11. Microsoft addressed the flaw in the July 14, 2026 security update for Windows 11 versions 24H2 and 25H2, while Windows 11 version 26H1 systems were...

CVE-2026-50340, a high-severity Windows Runtime elevation-of-privilege flaw, is fixed in Microsoft’s July 14, 2026 security updates for Windows 11 and Windows Server 2025. The vulnerability carries a CVSS 3.1 score of 8.5 and could let an authenticated attacker elevate privileges through a...

CVE-2026-50317 is a high-severity Windows privilege-escalation vulnerability that can let a locally authenticated attacker gain elevated rights through a race condition and use-after-free flaw. Microsoft addressed it in the July 14, 2026 security updates for Windows 11 24H2, Windows 11 25H2...

Microsoft has fixed CVE-2026-50322, an Important-rated Windows Runtime vulnerability that can let a locally authenticated attacker elevate privileges and gain high-impact control over an affected PC or server. The correction arrived with the July 14, 2026 cumulative updates for Windows 11 24H2...

Microsoft has patched CVE-2026-50345, an Important-rated Windows Runtime elevation-of-privilege vulnerability affecting Windows 11 versions 24H2, 25H2, and 26H1, along with Windows Server 2025. Administrators running Windows 11 24H2 or 25H2 should deploy the July 14, 2026 cumulative update...

CVE-2026-50390 is a Windows Kernel elevation-of-privilege vulnerability that can give a locally authenticated attacker high-level control over an affected PC or server. Microsoft fixed the flaw in its July 14, 2026 security updates, and administrators should treat the patch as part of the...

Microsoft has patched CVE-2026-50425, a high-severity Windows privilege-escalation vulnerability that could let an attacker with an existing local account obtain greater control over a compromised PC or server. The fix is included in the July 14, 2026 security updates for Windows 10, Windows 11...

CVE-2026-50396 exposes supported Windows 11 and Windows Server 2025 systems to local privilege escalation through a use-after-free flaw in Windows kernel-mode drivers. Microsoft addressed the vulnerability in security updates released on July 14, 2026, and administrators should verify that...

CVE-2026-50343, an elevation-of-privilege vulnerability in Microsoft Install Service, has been fixed in Microsoft’s July 14, 2026 security updates for supported Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025 systems. The flaw carries a CVSS 3.1 base...

CVE-2026-50331 is a Windows Application Model Core API use-after-free vulnerability that can let a locally authenticated attacker elevate privileges on supported Windows 10, Windows 11, and Windows Server systems. Microsoft fixed the flaw in the July 14, 2026 security updates, assigning it an...

Microsoft has patched CVE-2026-50407, a high-severity elevation-of-privilege vulnerability in the Windows Resilient File System that could let a locally authenticated attacker gain extensive control over an affected PC or server. The fix shipped with Microsoft’s July 14, 2026 security updates...

CVE-2026-50440 allows a locally authenticated attacker to exploit a race condition in the Windows Audio Service and elevate privileges on affected Windows 11 systems. Microsoft addressed the high-severity flaw in security updates covering Windows 11 versions 24H2, 25H2, and 26H1, making patch...

Microsoft has fixed CVE-2026-50326, a Windows Unified Consent System elevation-of-privilege vulnerability that could let a locally authenticated attacker gain higher permissions. The flaw carries a CVSS 3.1 base score of 7.8 and affects Windows 10, Windows 11, and Windows Server 2025 systems...