CVE-2026-50300
Windows DWM Core Library Information Disclosure vulnerability
MSRC advisory July 14, 2026
Alert details
- Source feed
- Microsoft MSRC
- CVE ID
- CVE-2026-50300
- Affected products
- Windows DWM Core Library Information Disclosure · Microsoft Windows DWM Core Library Information Disclosure · Microsoft
What happened
Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally.
What it means for your business
Windows DWM Core Library Information Disclosure vulnerability (CVE-2026-50300) was added to Microsoft’s security update guidance. Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.
Sources
Related briefs
Windows DWM Core Library Information Disclosure vulnerability
Windows DWM Core Library Information Disclosure vulnerability (CVE-2026-62703) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Windows DWM Core Library Information Disclosure vulnerability
Windows DWM Core Library Information Disclosure vulnerability (CVE-2026-48566) was added to Microsoft’s security update guidance. This CVE has been discovered to be an Elevation of Privilege and not an Information Disclosure. The CVE's Impact has been updated. If you need help checking exposure, call (864) 335-9223.
Windows DWM Core Library Information Disclosure vulnerability
Windows DWM Core Library Information Disclosure vulnerability (CVE-2026-44814) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Windows Device Health Attestation (DHA) Remote Code Execution vulnerability
Windows Device Health Attestation (DHA) Remote Code Execution vulnerability (CVE-2026-71331) was added to Microsoft’s security update guidance. Updated links to security updates. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Need help patching?
PremierePC monitors KEV alerts for managed clients and helps teams prioritize remediation before attackers do.