privilege escalation

CVE-2026-50400 is a newly patched Windows App Installer privilege-escalation vulnerability that allows a locally authenticated attacker to raise privileges through a stack-based buffer overflow. Microsoft addressed the flaw in its July 14, 2026 security updates, covering current Windows 11...

Microsoft has patched CVE-2026-50337, an Important-rated Windows Notification elevation-of-privilege vulnerability that could let a locally authenticated attacker gain higher privileges. The fix arrived with the July 14, 2026 security updates and applies across supported Windows 10, Windows 11...

CVE-2026-50412 is a high-severity Windows NTFS vulnerability that allows a locally authenticated attacker to elevate privileges through a stack-based buffer overflow. Microsoft released the fix on July 14, 2026, as part of its monthly Windows security updates, covering supported Windows 10...

CVE-2026-50393 exposes supported Windows 11 and Windows Server 2025 systems to local privilege escalation through a use-after-free flaw in a Windows kernel-mode driver. Microsoft addressed the vulnerability in its July 14, 2026 security rollout for most affected systems, while its published...

CVE-2026-50360 exposes Windows SMB Server to a high-severity privilege-escalation attack that can be launched across a network by an attacker who already has valid credentials. Microsoft fixed the flaw in its July 14, 2026 security updates, making prompt deployment particularly important for...

CVE-2026-50392, a newly patched use-after-free flaw in Windows Secure Kernel Mode, can let an authorized local attacker elevate privileges on Windows 11 and Windows Server 2025. Microsoft rates the vulnerability Critical, making the July 14, 2026 security updates the required fix for affected...

CVE-2026-50363, a heap-based buffer overflow in Windows Push Notifications, can let an authenticated local attacker elevate privileges on affected Windows 10, Windows 11, and Windows Server systems. Microsoft addressed the flaw in its July 14, 2026 security updates, making deployment of the...

Microsoft has patched CVE-2026-50329, an Important-rated elevation-of-privilege vulnerability associated with the Windows Desktop Window Manager Core Library, across supported Windows 10, Windows 11, and Windows Server releases. The flaw carries a CVSS 3.1 base score of 7.8 and could let an...

CVE-2026-50372, a Windows Redirected Drive Buffering elevation-of-privilege vulnerability, was addressed in Microsoft’s July 14, 2026 security updates across supported Windows 11, Windows 10, and Windows Server releases. The flaw carries a CVSS 3.1 score of 7.0 and could let a low-privileged...

CVE-2026-50364 is a high-severity Windows Backup Service elevation-of-privilege vulnerability fixed in Microsoft’s July 14, 2026 security updates. Administrators should prioritize the cumulative updates for affected Windows 10 and Windows 11 systems, particularly shared endpoints where an...

CVE-2026-50384, a Windows Clip Service elevation-of-privilege vulnerability, is fixed in Microsoft’s July 14, 2026 security updates for supported Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025 systems. The flaw carries a CVSS 3.1 score of 7.0 and could...

CVE-2026-50356 is a newly patched Microsoft Windows App Store race-condition vulnerability that can let a locally authenticated attacker elevate privileges, potentially gaining broad control over an affected PC or server. Microsoft addressed the flaw in its July 14, 2026 security updates, making...

CVE-2026-50325 is a Windows Win32k elevation-of-privilege vulnerability that can let an authenticated local attacker gain higher permissions, potentially taking full control of an affected system. Microsoft disclosed the flaw on July 14, 2026, rated it High severity with a CVSS 3.1 score of 7.0...

Microsoft has patched CVE-2026-50297, a Windows Win32k elevation-of-privilege vulnerability that could let a low-privileged attacker gain extensive control of a compromised PC or server. The flaw affects supported editions from Windows Server 2012 through Windows Server 2025, along with Windows...

CVE-2026-50296, a use-after-free vulnerability in the Windows DirectX Graphics Kernel, can let a locally authenticated attacker elevate privileges and gain extensive control of an affected PC or server. Microsoft patched the flaw in the July 14, 2026 security updates across supported Windows 10...

Microsoft has fixed CVE-2026-50354, a Windows Kernel use-after-free vulnerability that can let a locally authenticated attacker elevate privileges. The flaw carries a CVSS 3.1 score of 7.1 and affects supported Windows 10, Windows 11, and Windows Server releases, making the July 14, 2026...

CVE-2026-50293 is a high-severity Windows privilege-escalation vulnerability that can let a locally authenticated attacker exploit the Windows Internal Task Bar and gain elevated rights. Microsoft addressed the flaw in security updates available for Windows 10, Windows 11 24H2 through 26H1, and...

CVE-2026-50342, a high-severity elevation-of-privilege flaw in the Windows MIDI Service Module, is fixed by Microsoft’s July 14, 2026 security updates for Windows 11 versions 24H2, 25H2, and 26H1. Administrators should prioritize the cumulative updates because successful exploitation requires...

CVE-2026-50351, an elevation-of-privilege flaw in Windows Audio Compression Manager, is fixed by Microsoft’s July 14, 2026 security updates. The vulnerability carries a CVSS 3.1 base score of 7.8 and affects supported Windows 10, Windows 11, and Windows Server installations, making the monthly...

CVE-2026-50318 exposes Windows Resilient File System code to a local privilege-escalation attack, allowing a low-privileged attacker to potentially gain extensive control over an affected Windows machine. Microsoft fixed the flaw in its July 14, 2026 security updates, making prompt deployment...