CVE-2026-50650 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.8 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Windows Releases

Platform

Version

Windows 10

1607 (x64, x86)	KB5087065
1607 (x64, x86)	KB5087537
1809 (x64, x86)	KB5087066
1809 (x64, x86)	KB5087061
21H2 (arm64, x64, x86)	KB5087064
21H2 (arm64, x64, x86)	KB5087053
22H2 (arm64, x64, x86)	KB5087064
22H2 (arm64, x64, x86)	KB5087053

Windows 11

23H2 (arm64, x64)	KB5087058
24H2 (arm64, x64)	KB5092430
25H2 (arm64, x64)	KB5092427
26H1 (arm64, x64)	KB5092431

Windows Server 2012

Server Core	KB5087048
Server Core	KB5087062
Server Core	KB5087067
Standard	KB5087048
Standard	KB5087062
Standard	KB5087067

Windows Server 2012 R2

Server Core	KB5087049
Server Core	KB5087063
Server Core	KB5087069
Standard	KB5087049
Standard	KB5087063
Standard	KB5087069

Windows Server 2016

Server Core	KB5087065
Server Core	KB5087537
Standard	KB5087065
Standard	KB5087537

Windows Server 2019

Server Core	KB5087061
Server Core	KB5087066
Standard	KB5087061
Standard	KB5087066

Windows Server 2022

Server Core	KB5087059
Server Core	KB5087068
Standard	KB5087059
Standard	KB5087068

Windows Server 2025

Server Core	KB5087057
Standard	KB5087057

Common Weakness Enumeration

CWE-94 - Improper Control of Generation of Code ('Code Injection')
The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Vulnerability Media Exposure

[ENGLISH] Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days
Today is Microsoft's July 2026 Patch Tuesday, and with it comes security updates for a record-breaking 570 flaws, including two zero-day vulnerabilities exploited in attacks and one publicly disclosed. [...]
Published: 2026-07-14T14:01:36-04:00

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650