Zscaler found Windows Security Vulnerabilities | 07-14

Back Zscaler

Zscaler found Windows Security Vulnerabilities | 07-14

Zscaler • July 14, 2026

Share: View original

Zscaler, working with Microsoft through their MAPP program, has proactively deployed protection for the following 26 vulnerabilities included in July 2026 Microsoft security bulletins. Zscaler will continue to monitor exploits associated with all vulnerabilities in the July release and deploy additional protections, as necessary.

CVE-2026-57091 – Windows File History Service Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-54986 – Windows Win32k Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-54114 – Windows Win32k Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-50688 – Windows Win32k Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-50667 – Windows Common Log File System Driver Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-50518 – Windows DHCP Server Remote Code Execution Vulnerability

Subscriptions Required

CVE-2026-50489 – Win32k Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-50476 – Windows Network Connections Service Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-50475 – Windows Kernel Information Disclosure Vulnerability

Subscriptions Required

CVE-2026-50454 – Windows User Interface Core Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-50436 – Windows Kernel Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-50433 – Windows Media Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-50423 – Windows Kernel Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-50420 – HTTP.sys Information Disclosure Vulnerability

Subscriptions Required

CVE-2026-50387 – Windows GDI Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-50375 – DirectX Graphics Kernel Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-50351 – Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-50343 – Microsoft Install Service Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-50332 – Windows Kernel Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-50329 – Microsoft DWM Core Library Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-49805 – Win32k Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-49798 – Windows Kernel Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-49795 – Windows Kernel Elevation of Privilege Vulnerability

Subscriptions Required

CVE-2026-49170 – Windows StateRepository API Server file Elevation of Privilege Vulnerability

Subscriptions Required

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Zscaler Protects Against 26 Windows Vulnerabilities in July 2026 On July 14, 2026, Zscaler announced the deployment of protections against 26 vulnerabilities identified in Microsoft's July 2026 security bulletins. These vulnerabilities include critical elevation of privilege and remote code execution flaws, affecting various Windows components such as the DHCP Server and Win32k. The vulnerabilities are cataloged under CVEs, including CVE-2026-57091, which was published on the same day. Zscaler is actively monitoring for exploits related to these vulnerabilities and will implement additional protections as necessary. Organizations using affected Windows systems are advised to ensure they have the latest security measures in place. The vulnerabilities could potentially allow attackers to gain elevated privileges or execute arbitrary code remotely. Zscaler's collaboration with Microsoft through the MAPP program highlights their commitment to cybersecurity. 2 sources 58

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (24)

CWE Weaknesses (2)

CWE-200 - Exposure of Sensitive Information CWE-269 - Improper Privilege Management

Platforms (1)

Vulnerabilities (17)

DirectX Graphics Kernel Elevation Of Privilege Vulnerability HTTP.sys Information Disclosure Vulnerability Microsoft DWM Core Library Elevation Of Privilege Vulnerability Microsoft Install Service Elevation Of Privilege Vulnerability Win32k Elevation Of Privilege Vulnerability Windows Audio Compression Manager (acm) Elevation Of Privilege Vulnerability Windows Common Log File System Driver Elevation Of Privilege Vulnerability Windows DHCP Server Remote Code Execution Vulnerability Windows File History Service Elevation Of Privilege Vulnerability Windows GDI Elevation Of Privilege Vulnerability Windows Kernel Elevation Of Privilege Vulnerability Windows Kernel Information Disclosure Vulnerability Windows Media Elevation Of Privilege Vulnerability Windows Network Connections Service Elevation Of Privilege Vulnerability Windows StateRepository API Server File Elevation Of Privilege Vulnerability Windows User Interface Core Elevation Of Privilege Vulnerability Windows Win32k Elevation Of Privilege Vulnerability