wsus security

CVE-2026-50444 exposes Windows Server Update Services to network-based privilege escalation, allowing an authenticated attacker with limited permissions to potentially gain extensive control of an affected server. Microsoft rated the vulnerability Critical, assigned it a CVSS 3.1 score of 8.8...

CVE-2026-50328 affects Windows Server Update Services and allows an unauthenticated attacker to disrupt a WSUS server over the network by triggering an uncaught exception. Microsoft released fixes with its July 14, 2026 security updates and rates the vulnerability Important, making prompt...

CVE-2026-32224 is the kind of Windows Server vulnerability that administrators cannot afford to treat as a theoretical footnote. Microsoft’s Security Update Guide entry identifies it as a Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability, and third-party tracking...

Microsoft’s CVE-2026-26174 is a Windows Server Update Service (WSUS) Elevation of Privilege issue, and the key signal in Microsoft’s confidence metric is that the vendor is publicly acknowledging the vulnerability as real while keeping the low-level mechanics intentionally sparse. That...