PT-2026-58223 · Microsoft · Windows 10+3

CVE-2026-54114 · Published 2026-07-14 · Updated 2026-07-14

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows 10 Windows 11 Windows Server (affected versions not specified)

Description A use after free issue in Windows Win32K allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed, which can be exploited to execute arbitrary code or gain higher permissions.

Recommendations Install the July cumulative updates for Windows 10, Windows 11, and Windows Server.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-54114

Affected Products

Windows

Windows 10

Windows 11

Windows Server

References · 5

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54114 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-54114 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54114 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-54114 · Vendor Advisory
• https://twitter.com/windowsforum/status/2077151213435420905 · Twitter Post