Cve 2026 50303
The latest Cve 2026 50303 coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2026-50390: How a Windows Kernel type-confusion flaw could give attackers control of your PC – and why you must patch now
Microsoft's July 2026 Patch Tuesday included a fix for CVE-2026-50390, a Windows Kernel type-confusion vulnerability that allows local attackers to gain SYSTEM privileges. While no active exploits exist, Microsoft deems exploitation \
July 2026 Windows Update Closes Kernel Flaw That Could Expose Your Private Data to Attackers
Microsoft's July 2026 security patches fix CVE-2026-50377, a Windows Kernel out-of-bounds read that lets low-privileged attackers steal sensitive data. The vulnerability affects all supported Windows versions and requires only a local foothold. Home users have modest risk, but enterprises should prioritize servers and developer workstations, while a Dell safeguard blocks the update on some Intel-based devices.
Local Access Turns to Total Takeover: The Windows ReFS Flaw You Need to Patch Right Now
Microsoft's July 14, 2026 security updates fix CVE-2026-50357, a privilege-escalation vulnerability in the Windows Resilient File System that allows a local attacker to gain complete control over affected Windows 10, Windows 11, and Windows Server systems. While no active exploitation is known, the flaw's low attack complexity and high impact warrant swift patching across all supported platforms.
July Windows Update Seals Off HID Integer Overflow Leak — Here Are the Builds You Need
Microsoft’s July 14, 2026 security updates address CVE-2026-50310, a local information‑disclosure vulnerability in the Windows Human Interface Device (HID) stack caused by an integer overflow. The flaw, rated medium severity with a 4.7 CVSS score, could allow a low‑privileged local attacker to read sensitive information, potentially aiding chained exploits. Patches are available for all supported Windows and Windows Server versions via specific cumulative updates; users and administrators should verify their build number and apply the update promptly, while testing for known compatibility issues on certain Dell devices and Server 2022 BitLocker configurations.
Microsoft Patches AD FS Infinite Loop Vulnerability That Could Disable Enterprise Sign-Ons
Microsoft's July 14, 2026 security updates fix CVE-2026-50324, a denial-of-service vulnerability in Active Directory Federation Services that lets unauthenticated attackers trigger an infinite loop and crash the service. The flaw affects all supported Windows Server versions and, if exploited, could block users from signing into Microsoft 365 and other federated applications. While rated Important with a 5.9 CVSS score, its potential to disrupt entire identity infrastructures makes prompt patching critical, especially alongside a separate exploited AD FS vulnerability in the same release.
Windows Push Notification Bug Lets Locally-Authenticated Users Steal Secrets — Here’s the Fix
Microsoft’s July 2026 Patch Tuesday addresses CVE-2026-50339, a Windows Push Notifications flaw that lets a locally authenticated attacker read confidential data. All supported Windows versions are affected; applying the cumulative update eliminates the risk. With high confidentiality impact and simple local exploitation, patching is urgent for shared and multi-user systems.
A Local Windows Push Notification Bug Can Leak Data—Here’s How to Patch It
Microsoft’s July 2026 Patch Tuesday fixes CVE-2026-50430, an information-disclosure flaw in Windows Push Notifications that lets a low-privileged local attacker steal sensitive data without user interaction. The fix is delivered through cumulative updates for all supported Windows 10, Windows 11, and Windows Server editions, including Server Core. While not actively exploited at disclosure, the vulnerability's low attack complexity makes it a high-priority patch for any organization concerned about post-compromise lateral movement.
Windows Updates Close Privilege-Escalation Gate: The Builds You Need to Have
Microsoft patched a high-severity privilege-escalation vulnerability (CVE-2026-50425) in its July 2026 security updates. The local-attack flaw in the Windows User Profile component could let attackers with limited access gain system-level control. This article details the required updates, build numbers, practical risks for different users, and steps to secure Windows devices now.
Important Windows 11 WIA Bug Fixed: July Patches Block Privilege Escalation
Microsoft's July 2026 Patch Tuesday included a fix for CVE-2026-50315, an important privilege escalation vulnerability in Windows Image Acquisition (WIA) that affects Windows 11 and Windows Server 2025. The local, low-complexity flaw lets attackers silently gain SYSTEM-level control from a low-privilege foothold. Administrators and home users should apply the cumulative update immediately and check their OS build to ensure protection.
Windows DHCP Server RCE Vulnerability Demands Urgent Patching—Here’s the Fix
Microsoft's July 14, 2026 patch fixes CVE-2026-50370, a critical DHCP Server RCE that allows unauthenticated attackers on an adjacent network to take full control of Windows servers. Administrators must immediately update all DHCP servers to the corrected builds and audit relay agents to reduce exposure, as exploitation is considered more likely.
Microsoft Patches Critical Windows USB Driver Flaw That Hands Full Control to Attackers
Microsoft's July 2026 Patch Tuesday fixes CVE-2026-50321, a high-severity local privilege-escalation flaw in the Windows USB driver. The race condition and use-after-free vulnerability affects all supported Windows 10, 11, and Server releases, allowing low-privileged local attackers to gain full system control with low complexity and no user interaction. Immediate patching is crucial, especially on multi-user workstations and servers.
July 2026 Patch Tuesday: Microsoft Fixes Windows Installer Flaw That Could Hand Attackers Full Control
Microsoft's July 2026 Patch Tuesday addresses CVE-2026-50343, a privilege escalation flaw in Windows Install Service that lets attackers with low-level access gain full system control. The update fixes all supported Windows 10, 11, and Server versions; no workarounds exist. Users and admins should immediately install the cumulative patches to prevent post-compromise exploitation.
Windows 11 July Update Closes Kernel Elevation Hole: What You Need to Know
Microsoft's July 14, 2026 security updates fix CVE-2026-50396, a use-after-free vulnerability in Windows kernel-mode drivers that could allow a local attacker to gain SYSTEM privileges on Windows 11 and Server 2025. The flaw carries a CVSS score of 7.0 and requires a low-privileged foothold, making it a potent second-stage exploit. Users and admins should verify that affected systems have reached the specific patched builds, not just that they've installed the latest cumulative update.