privilege escalation

CVE-2026-50323 exposes Windows 11 24H2, Windows 11 25H2, and Windows Server 2025 to local privilege escalation through a use-after-free flaw in Windows Runtime. Microsoft fixed the vulnerability in its July 14, 2026 security updates, making the practical response straightforward: deploy the...

CVE-2026-49803 exposes the Windows AppX Deployment Service to a local elevation-of-privilege attack across supported Windows 10, Windows 11, and Windows Server releases. Microsoft fixed the flaw in its July 14, 2026 security updates, making those cumulative patches the primary protection for...

Microsoft fixed CVE-2026-49805, an Important-rated Win32k elevation-of-privilege vulnerability, in the July 14, 2026 Windows security updates. The flaw can let an attacker who already has local access and limited privileges gain far greater control of an affected PC or server, making the...

CVE-2026-49802 is a newly patched Windows USB Print Driver vulnerability that can let a low-privileged local attacker elevate access and potentially take full control of an affected PC or server. Microsoft rated the flaw Important and released fixes on July 14, 2026, for supported Windows 11...

CVE-2026-50311 is a high-severity Windows privilege-escalation vulnerability that allows a low-privileged, authenticated attacker to gain elevated local access. Microsoft fixed the improper-access-control flaw in its July 14, 2026 security updates, making patch deployment the primary action for...

CVE-2026-49800 exposes supported Windows clients and servers to a local privilege-escalation attack through the Web Proxy Auto-Discovery Protocol, with Microsoft assigning the flaw a CVSS 3.1 score of 7.8 High. The fix shipped in Microsoft’s July 14, 2026 security updates, and administrators...

CVE-2026-49795, a newly patched Windows Kernel elevation-of-privilege vulnerability, allows a local attacker with an existing low-privilege account to exploit a use-after-free condition and cross a Windows security boundary. Microsoft rates the flaw Important, but its CVSS 3.1 base score of 8.8...

Microsoft has fixed CVE-2026-49791, an Important-rated elevation-of-privilege vulnerability in Windows Routing and Remote Access Service that could let a low-privileged local attacker manipulate file access and gain greater control of an affected system. The correction arrived with the July 14...

CVE-2026-49789, a newly patched Windows NTFS elevation-of-privilege vulnerability, can let a low-privileged local attacker gain broader control of an affected PC or server by triggering a stack-based buffer overflow. Microsoft released the fix on July 14, 2026, through its monthly cumulative...

Microsoft has patched CVE-2026-49183, a Windows Clipboard Server elevation-of-privilege vulnerability affecting supported Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025 releases. Administrators should deploy the July 14, 2026 cumulative security...

CVE-2026-48581 exposes a local elevation-of-privilege path across multiple Microsoft Surface product lines, including Surface Pro 8, Surface Laptop 4, Surface Laptop Go 3, Surface Go, Surface Hub, and Windows Dev Kit devices. Microsoft published the vulnerability on July 14, 2026, assigning it a...

CVE-2026-44800 is a high-severity elevation-of-privilege vulnerability in Windows Push Notifications that Microsoft fixed on July 14, 2026, with updates for Windows 11 and Windows Server 2025. The flaw requires an attacker to already have local access, but successful exploitation could raise...

Microsoft PC Manager versions earlier than 3.21.6.0 contain a local privilege-escalation vulnerability that could let an attacker with an existing account gain elevated control of a Windows PC. Microsoft disclosed CVE-2026-58636 on July 14, 2026, rating it Important with a CVSS 3.1 score of 7.8...

Microsoft’s July 14, 2026 security updates fix CVE-2026-58635, a command-injection vulnerability in Windows Narrator’s braille support that could let a locally authenticated attacker elevate privileges. The flaw affects supported Windows 10, Windows 11, Windows Server 2019, Windows Server 2022...

Microsoft has disclosed CVE-2026-47301, an Important-rated elevation-of-privilege vulnerability in Microsoft Configuration Manager 2509 that could let a low-privileged authenticated attacker gain elevated access over the network. The flaw carries a CVSS 3.1 base score of 8.8, putting...

CVE-2026-58602 exposes supported Windows 11 and Windows Server 2025 systems to a local privilege-escalation attack, with Microsoft shipping a fix in its July 14, 2026 security updates. The flaw carries a CVSS 3.1 score of 7.8, rated Important by Microsoft and High under the CVSS scale, because...

Microsoft has patched CVE-2026-58601, a high-impact elevation-of-privilege vulnerability in the Windows Virtual Hard Disk Miniport Driver, through the July 14, 2026 security updates. The flaw affects supported Windows 10, Windows 11, and Windows Server releases, and could let a locally...

CVE-2026-58526 is a newly patched Windows Storage vulnerability that can let a locally authenticated attacker elevate privileges and gain broad control over an affected system. Microsoft fixed the flaw in the July 14, 2026 cumulative updates for Windows 10, Windows 11, Windows Server 2019...

Microsoft has fixed CVE-2026-57969, a high-severity Azure CycleCloud privilege-escalation vulnerability affecting releases earlier than Azure CycleCloud 8.9.1. Administrators running the service to orchestrate high-performance computing clusters should treat the 8.9.1 upgrade as a security...

No fixed version is confirmed in the available advisory data; inventory Windows Admin Center gateways, restrict access, preserve logs, and apply Microsoft’s named fixed release when the MSRC product table is available. Microsoft published CVE-2026-57107, titled Windows Admin Center Elevation of...