CVE-2026-50406

highCVSS 7covered by 3 sourcesfirst seen 2026-07-14

Microsoft has fixed a very large number of vulnerabilities in Windows. An attacker can exploit the vulnerabilities to carry out attacks that can lead to categories of damage, as mentioned in the table below. The most severe vulnerabilities have been assigned characteristics CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188, and CVE-2026-57092 and are located in the FTP service, Remote Desktop (client and server), the Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver, and VMSwitch, respectively. Attackers with access to these services may be able to execute code or gain access to the vulnerable system without prior authentication. In addition to these severe vulnerabilities, more than 400 vulnerabilities have been fixed, all varying in severity from medium to high/critical. Due to the nature and scope of these updates, the NCSC advises to prioritize the deployment of these updates.

CSIRTS triage

What: Microsoft has fixed a large number of vulnerabilities in Windows that can be exploited by attackers.
Who is affected: Users of Microsoft Windows operating systems.
Urgency: Remediation is urgent due to active exploitation of these vulnerabilities.
Action: Users should apply the latest patches provided by Microsoft.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-50406

Get an email if CVE-2026-50406 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.26% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 18% of all EPSS-scored CVEs.

Advisory coverage (3)

highCVE-2026-50406: Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges lo…nvd · 2026-07-14
unknownexploitedNCSC-2026-0231 [1.00] [M/H] Vulnerabilities fixed in Microsoft Windowsncsc-nl · 2026-07-14
highCVE-2026-50406: Windows Backup Engine Elevation of Privilege Vulnerabilitymsrc · 2026-07-14

External references

NVD record for CVE-2026-50406

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-50406 status](https://www.csirts.com/badge/CVE-2026-50406)](https://www.csirts.com/cve/CVE-2026-50406)