← Database

CVE-2026-50444

HIGH CVSS: 8.8 Published: 2026-07-14 Modified: 2026-07-21

Description

Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network.

Affected Platforms

Microsoft Windows Server 2016Microsoft Windows Server 2019Microsoft Windows Server 2025Microsoft Windows Server 2022Microsoft Windows 10 1809Microsoft Windows Server 2012Microsoft Windows 10 1607

Weakness Type

CWE-306

References