Cve 2026 50384
The latest Cve 2026 50384 coverage — news, analysis, and updates from the WindowsNews.AI desk.
High-Severity Windows Flaw Patched, But Dell Systems Hit by Update Block
Microsoft's July 2026 Patch Tuesday addresses a high-severity elevation-of-privilege vulnerability (CVE-2026-50361) in the Brokering File System, affecting Windows 11 and Windows Server 2025. The local attack can give a standard user full system control, but a safeguard hold blocks the update on some Dell PCs with Intel processors due to hardware issues. Users must manually check their OS build to confirm protection, and administrators need to apply workarounds on blocked systems until Dell and Microsoft resolve the incompatibility.
Windows DirectX Kernel Vulnerability Patched: CVE-2026-50375 Fixed in July 2026 Update — Here's What to Do
Microsoft’s July 2026 security updates fixed CVE-2026-50375, a local privilege-escalation bug in the Windows DirectX Graphics Kernel caused by a heap overflow. The vulnerability affects all supported Windows versions, requires local access, and has not been exploited in the wild. Users should apply cumulative updates immediately; admins should test graphics-heavy workloads post-patch.
CVE-2026-50335: A High-Severity Windows Flaw That Turns Limited Access into Full Control
Microsoft's July 2026 Patch Tuesday fixes CVE-2026-50335, a high-severity Windows privilege escalation vulnerability (CVSS 7.8) that affects all supported Windows and Windows Server versions. The local, low-complexity flaw could let attackers with limited access take full control of a system. Though not yet exploited, the risk of chaining with other attacks makes immediate patching critical. The fix is included in this month's cumulative updates; deployment requires verifying specific build numbers and watching for companion changes in TDI, Remote Desktop, and BitLocker.
Windows Runtime Race Condition Fix Rolls Out in July 2026 Patches—Here’s Who Needs It Most
CVE-2026-50322 is a Windows Runtime race condition that could let a local attacker gain full system control. Microsoft fixed the bug in July 14, 2026 updates for Windows 11 and Server 2025, with no active exploits yet. IT admins should prioritize patching shared and sensitive machines while confirming the installed build number.
Microsoft Patches Race Condition Flaw That Could Let Attackers Fully Control Windows 11 PCs (CVE-2026-50345)
Microsoft's July 2026 Patch Tuesday includes a fix for CVE-2026-50345, a race condition in the Windows Runtime that could allow a local attacker to escalate privileges from a standard user account to full SYSTEM control. The update KB5101650 addresses Windows 11 24H2 and 25H2, while Windows 11 26H1 received the fix in June. Windows Server 2025 is also affected. Although the vulnerability requires local access and high attack complexity, it poses a serious risk in multi-stage attacks. Home users and IT admins should apply the updates immediately and verify resulting OS builds.
CVE-2026-50390: How a Windows Kernel type-confusion flaw could give attackers control of your PC – and why you must patch now
Microsoft's July 2026 Patch Tuesday included a fix for CVE-2026-50390, a Windows Kernel type-confusion vulnerability that allows local attackers to gain SYSTEM privileges. While no active exploits exist, Microsoft deems exploitation \
July 2026 Windows Update Closes Kernel Flaw That Could Expose Your Private Data to Attackers
Microsoft's July 2026 security patches fix CVE-2026-50377, a Windows Kernel out-of-bounds read that lets low-privileged attackers steal sensitive data. The vulnerability affects all supported Windows versions and requires only a local foothold. Home users have modest risk, but enterprises should prioritize servers and developer workstations, while a Dell safeguard blocks the update on some Intel-based devices.
Local Access Turns to Total Takeover: The Windows ReFS Flaw You Need to Patch Right Now
Microsoft's July 14, 2026 security updates fix CVE-2026-50357, a privilege-escalation vulnerability in the Windows Resilient File System that allows a local attacker to gain complete control over affected Windows 10, Windows 11, and Windows Server systems. While no active exploitation is known, the flaw's low attack complexity and high impact warrant swift patching across all supported platforms.
July Windows Update Seals Off HID Integer Overflow Leak — Here Are the Builds You Need
Microsoft’s July 14, 2026 security updates address CVE-2026-50310, a local information‑disclosure vulnerability in the Windows Human Interface Device (HID) stack caused by an integer overflow. The flaw, rated medium severity with a 4.7 CVSS score, could allow a low‑privileged local attacker to read sensitive information, potentially aiding chained exploits. Patches are available for all supported Windows and Windows Server versions via specific cumulative updates; users and administrators should verify their build number and apply the update promptly, while testing for known compatibility issues on certain Dell devices and Server 2022 BitLocker configurations.
Microsoft Patches AD FS Infinite Loop Vulnerability That Could Disable Enterprise Sign-Ons
Microsoft's July 14, 2026 security updates fix CVE-2026-50324, a denial-of-service vulnerability in Active Directory Federation Services that lets unauthenticated attackers trigger an infinite loop and crash the service. The flaw affects all supported Windows Server versions and, if exploited, could block users from signing into Microsoft 365 and other federated applications. While rated Important with a 5.9 CVSS score, its potential to disrupt entire identity infrastructures makes prompt patching critical, especially alongside a separate exploited AD FS vulnerability in the same release.
Windows Push Notification Bug Lets Locally-Authenticated Users Steal Secrets — Here’s the Fix
Microsoft’s July 2026 Patch Tuesday addresses CVE-2026-50339, a Windows Push Notifications flaw that lets a locally authenticated attacker read confidential data. All supported Windows versions are affected; applying the cumulative update eliminates the risk. With high confidentiality impact and simple local exploitation, patching is urgent for shared and multi-user systems.
A Local Windows Push Notification Bug Can Leak Data—Here’s How to Patch It
Microsoft’s July 2026 Patch Tuesday fixes CVE-2026-50430, an information-disclosure flaw in Windows Push Notifications that lets a low-privileged local attacker steal sensitive data without user interaction. The fix is delivered through cumulative updates for all supported Windows 10, Windows 11, and Windows Server editions, including Server Core. While not actively exploited at disclosure, the vulnerability's low attack complexity makes it a high-priority patch for any organization concerned about post-compromise lateral movement.
Windows Updates Close Privilege-Escalation Gate: The Builds You Need to Have
Microsoft patched a high-severity privilege-escalation vulnerability (CVE-2026-50425) in its July 2026 security updates. The local-attack flaw in the Windows User Profile component could let attackers with limited access gain system-level control. This article details the required updates, build numbers, practical risks for different users, and steps to secure Windows devices now.