Consultores de seguridad de Zscaler

Aviso de seguridad - julio 14, 2026

Zscaler protects against 26 new vulnerabilities for Windows

  1. Overview
  2. CVE-2026-57091 – Windows File History Service Elevation of Privilege Vulnerability
  3. CVE-2026-56164 – Microsoft SharePoint Server Elevation of Privilege Vulnerability
  4. CVE-2026-54986 – Windows Win32k Elevation of Privilege Vulnerability
  5. CVE-2026-54114 – Windows Win32k Elevation of Privilege Vulnerability
  6. CVE-2026-50688 – Windows Win32k Elevation of Privilege Vulnerability
  7. CVE-2026-50667 – Windows Common Log File System Driver Elevation of Privilege Vulnerability
  8. CVE-2026-50522 – Microsoft SharePoint Remote Code Execution Vulnerability
  9. CVE-2026-50518 – Windows DHCP Server Remote Code Execution Vulnerability
  10. CVE-2026-50489 – Win32k Elevation of Privilege Vulnerability
  11. CVE-2026-50476 – Windows Network Connections Service Elevation of Privilege Vulnerability
  12. CVE-2026-50475 – Windows Kernel Information Disclosure Vulnerability
  13. CVE-2026-50454 – Windows User Interface Core Elevation of Privilege Vulnerability
  14. CVE-2026-50436 – Windows Kernel Elevation of Privilege Vulnerability
  15. CVE-2026-50433 – Windows Media Elevation of Privilege Vulnerability
  16. CVE-2026-50423 – Windows Kernel Elevation of Privilege Vulnerability
  17. CVE-2026-50420 – HTTP.sys Information Disclosure Vulnerability
  18. CVE-2026-50387 – Windows GDI Elevation of Privilege Vulnerability
  19. CVE-2026-50375 – DirectX Graphics Kernel Elevation of Privilege Vulnerability
  20. CVE-2026-50351 – Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability
  21. CVE-2026-50343 – Microsoft Install Service Elevation of Privilege Vulnerability
  22. CVE-2026-50332 – Windows Kernel Elevation of Privilege Vulnerability
  23. CVE-2026-50329 – Microsoft DWM Core Library Elevation of Privilege Vulnerability
  24. CVE-2026-49805 – Win32k Elevation of Privilege Vulnerability
  25. CVE-2026-49798 – Windows Kernel Elevation of Privilege Vulnerability
  26. CVE-2026-49795 – Windows Kernel Elevation of Privilege Vulnerability
  27. CVE-2026-49170 – Windows StateRepository API Server file Elevation of Privilege Vulnerability

Zscaler, working with Microsoft through their MAPP program, has proactively deployed protection for the following 26 vulnerabilities included in July 2026 Microsoft security bulletins. Zscaler will continue to monitor exploits associated with all vulnerabilities in the July release and deploy additional protections, as necessary.

CVE-2026-57091 – Windows File History Service Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows Server 2016 (Server Core installation)
  • Windows Server 2016
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022

CVE-2026-56164 – Microsoft SharePoint Server Elevation of Privilege Vulnerability

Severity: Moderate

Subscriptions Required

  • Advanced Threat Protection

Affected Software

  • Microsoft SharePoint Server Subscription Edition
  • Microsoft SharePoint Server 2019
  • Microsoft SharePoint Enterprise Server 2016

CVE-2026-54986 – Windows Win32k Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows Server 2016 (Server Core installation)
  • Windows Server 2016
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems

CVE-2026-54114 – Windows Win32k Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems

CVE-2026-50688 – Windows Win32k Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2012 R2 (Server Core installation)
  • Windows Server 2012 R2
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012
  • Windows Server 2016 (Server Core installation)
  • Windows Server 2016
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems

CVE-2026-50667 – Windows Common Log File System Driver Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows Server 2012 R2 (Server Core installation)
  • Windows Server 2012 R2
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012
  • Windows Server 2016 (Server Core installation)
  • Windows Server 2016
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems

CVE-2026-50522 – Microsoft SharePoint Remote Code Execution Vulnerability

Severity: Critical

Subscriptions Required

  • Advanced Threat Protection

Affected Software

  • Microsoft SharePoint Server Subscription Edition
  • Microsoft SharePoint Server 2019
  • Microsoft SharePoint Enterprise Server 2016

CVE-2026-50518 – Windows DHCP Server Remote Code Execution Vulnerability

Severity: Critical

Subscriptions Required

  • Advanced Threat Protection
  • Advanced Cloud Firewall

Affected Software

  • Windows Server 2012 R2 (Server Core installation)
  • Windows Server 2012 R2
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012
  • Windows Server 2016 (Server Core installation)
  • Windows Server 2016
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1607 for 32-bit Systems
  • Windows Server 2025
  • Windows Server 2025 (Server Core installation)
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems

CVE-2026-50489 – Win32k Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows Server 2012 R2 (Server Core installation)
  • Windows Server 2012 R2
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012
  • Windows Server 2016 (Server Core installation)
  • Windows Server 2016
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025

CVE-2026-50476 – Windows Network Connections Service Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2012 R2 (Server Core installation)
  • Windows Server 2012 R2
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012
  • Windows Server 2016 (Server Core installation)
  • Windows Server 2016
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems

CVE-2026-50475 – Windows Kernel Information Disclosure Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows Server 2012 R2 (Server Core installation)
  • Windows Server 2012 R2
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012
  • Windows Server 2016 (Server Core installation)
  • Windows Server 2016
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems

CVE-2026-50454 – Windows User Interface Core Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)

CVE-2026-50436 – Windows Kernel Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)

CVE-2026-50433 – Windows Media Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows Server 2012 R2 (Server Core installation)
  • Windows Server 2012 R2
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012
  • Windows Server 2016 (Server Core installation)
  • Windows Server 2016
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems

CVE-2026-50423 – Windows Kernel Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022 

CVE-2026-50420 – HTTP.sys Information Disclosure Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems

CVE-2026-50387 – Windows GDI Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Microsoft Office 365 for Mac
  • Microsoft Office LTSC for Mac 2024
  • Microsoft Office for Android
  • Microsoft Office LTSC for Mac 2021
  • Windows Server 2012 R2 (Server Core installation)
  • Windows Server 2012 R2
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012
  • Windows Server 2016 (Server Core installation)
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows Server 2016
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025

CVE-2026-50375 – DirectX Graphics Kernel Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems

CVE-2026-50351 – Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows Server 2012 R2 (Server Core installation)
  • Windows Server 2012 R2
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012
  • Windows Server 2016 (Server Core installation)
  • Windows Server 2016
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems

CVE-2026-50343 – Microsoft Install Service Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems

CVE-2026-50332 – Windows Kernel Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows Server 2025
  • Windows Server 2012 R2 (Server Core installation)
  • Windows Server 2012 R2
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012
  • Windows Server 2016 (Server Core installation)
  • Windows Server 2016
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)

CVE-2026-50329 – Microsoft DWM Core Library Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2019
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022

CVE-2026-49805 – Win32k Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows Server 2012 R2 (Server Core installation)
  • Windows Server 2012 R2
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012
  • Windows Server 2016 (Server Core installation)
  • Windows Server 2016
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems

CVE-2026-49798 – Windows Kernel Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows Server 2012 R2 (Server Core installation)
  • Windows Server 2012 R2
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012
  • Windows Server 2016 (Server Core installation)
  • Windows Server 2016
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems

CVE-2026-49795 – Windows Kernel Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems

CVE-2026-49170 – Windows StateRepository API Server file Elevation of Privilege Vulnerability

Severity: Important

Subscriptions Required

  • Advanced Cloud Sandbox
  • Advanced Threat Protection

Affected Software

  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows Server 2022
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2019
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 11 version 26H1 for x64-based Systems
  • Windows Server 2025
  • Windows 11 Version 24H2 for x64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2025 (Server Core installation)