security updates

CVE-2026-50669 exposes the Windows Telephony Service to a local privilege-escalation attack, giving an authenticated attacker a path toward complete control of an affected machine. Microsoft released the fix on July 14, 2026, as part of its monthly security updates and rated the vulnerability...

Microsoft has patched CVE-2026-50661, a publicly disclosed BitLocker vulnerability that could let an unauthorized attacker bypass a Windows security feature after gaining physical access to a device. The fix arrived in the July 14, 2026 security updates and affects supported Windows 10, Windows...

Microsoft’s July 14, 2026 security updates fix CVE-2026-47295 across supported releases from SQL Server 2016 SP3 through SQL Server 2025. Administrators should inventory every SQL Server instance, identify its exact build and servicing branch, then install the matching GDR or CU-based security...

Microsoft has patched CVE-2026-50499, a Windows Print Spooler elevation-of-privilege vulnerability that can let an authenticated local attacker gain higher privileges through a heap-based buffer overflow. The fix arrived with Microsoft’s July 14, 2026 security updates and applies across...

Microsoft’s July 2026 security updates for Exchange Server patch four vulnerabilities across Exchange Server Subscription Edition RTM, Exchange Server 2019 CU14 and CU15, and Exchange Server 2016 CU23. Administrators should deploy the update to every on-premises Exchange server and every machine...

Microsoft has patched CVE-2026-50477, a Windows Kernel elevation-of-privilege vulnerability that can let a local attacker turn limited access into a much deeper system compromise. The fix arrived on July 14, 2026, through the monthly Windows security updates, including KB5101650 for Windows 11...

CVE-2026-50424 allows an unauthenticated attacker to knock a vulnerable Windows Server 2025 domain controller offline by sending malicious network traffic. Microsoft fixed the flaw in the July 14, 2026 security update, making KB5099536 and OS build 26100.33158 the immediate deployment target for...

CVE-2026-50447 exposes Windows Message Queuing Service to unauthenticated remote code execution through a heap-based buffer overflow, making the July 14 Windows security updates a priority for systems running MSMQ. Microsoft assigned the flaw a CVSS 3.1 score of 9.8 out of 10, reflecting an...

CVE-2026-50441, a newly patched elevation-of-privilege vulnerability in the Windows Resilient File System, can allow a locally authenticated attacker to gain higher permissions through an untrusted pointer dereference. Microsoft addressed the flaw in its July 14, 2026 security updates across...

Microsoft has patched CVE-2026-50365, an Important-rated elevation-of-privilege vulnerability in the Windows Remote Access Management service/API RPC server that could let an unauthenticated attacker gain elevated privileges from an adjacent network. The fix arrived with the July 14, 2026...

Microsoft has fixed CVE-2026-50376, an Important-rated Windows Remote Desktop Client information-disclosure vulnerability that can expose sensitive data when a user interacts with a malicious RDP endpoint. The flaw was published by the Microsoft Security Response Center on July 14, 2026, and is...

CVE-2026-50391 is a high-severity Windows Group Policy vulnerability that allows a locally authenticated attacker to elevate privileges, potentially gaining complete control over an affected PC or server. Microsoft fixed the flaw in the July 14, 2026 security updates, and administrators should...

Microsoft has fixed CVE-2026-50379, a Windows Media race-condition vulnerability that could let an authenticated attacker gain elevated privileges across a network. The flaw carries a CVSS 3.1 base score of 7.5 and affects Windows 11 versions 24H2, 25H2, and 26H1 on x64 and Arm64 systems...

CVE-2026-50336 is a Windows Media elevation-of-privilege vulnerability fixed through Microsoft’s July 14, 2026 security release, with supported Windows 11 systems receiving the correction through their cumulative updates. The flaw carries a CVSS 3.1 base score of 7.8, rated High, and can allow a...

CVE-2026-50428 exposes information through an out-of-bounds read in the Windows Container Isolation FS Filter Driver, unionfs.sys, on Windows 11 version 26H1. Microsoft rates the flaw Important with a CVSS 3.1 base score of 7.1, but exploitation requires an authenticated attacker with local...

Microsoft’s July 14, 2026 security updates address CVE-2026-50366, a denial-of-service vulnerability in Windows Active Directory Domain Services that can be triggered remotely by an authenticated attacker. Because exploitation could disrupt a domain controller’s availability, administrators...

CVE-2026-50404 is a high-severity Windows Media vulnerability that can let a locally authenticated attacker elevate privileges on Windows 11. Microsoft addressed the flaw in the July 14, 2026 security update for Windows 11 versions 24H2 and 25H2, while Windows 11 version 26H1 systems were...

CVE-2026-50396 exposes supported Windows 11 and Windows Server 2025 systems to local privilege escalation through a use-after-free flaw in Windows kernel-mode drivers. Microsoft addressed the vulnerability in security updates released on July 14, 2026, and administrators should verify that...

CVE-2026-50440 allows a locally authenticated attacker to exploit a race condition in the Windows Audio Service and elevate privileges on affected Windows 11 systems. Microsoft addressed the high-severity flaw in security updates covering Windows 11 versions 24H2, 25H2, and 26H1, making patch...

Windows 11 KB5099414 is now rolling out to supported Windows 11 version 23H2 devices, advancing the operating system to OS Build 22631.7376. Released on July 14, 2026, the mandatory cumulative update delivers July’s security fixes, Secure Boot certificate work, networking hardening, and repairs...