Zscaler, working with Microsoft through their MAPP program, has proactively deployed protection for the following 26 vulnerabilities included in July 2026 Microsoft security bulletins. Zscaler will continue to monitor exploits associated with all vulnerabilities in the July release and deploy additional protections, as necessary.
CVE-2026-57091 – Windows File History Service Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-54986 – Windows Win32k Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-54114 – Windows Win32k Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-50688 – Windows Win32k Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-50667 – Windows Common Log File System Driver Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-50518 – Windows DHCP Server Remote Code Execution Vulnerability
Subscriptions Required
CVE-2026-50489 – Win32k Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-50476 – Windows Network Connections Service Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-50475 – Windows Kernel Information Disclosure Vulnerability
Subscriptions Required
CVE-2026-50454 – Windows User Interface Core Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-50436 – Windows Kernel Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-50433 – Windows Media Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-50423 – Windows Kernel Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-50420 – HTTP.sys Information Disclosure Vulnerability
Subscriptions Required
CVE-2026-50387 – Windows GDI Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-50375 – DirectX Graphics Kernel Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-50351 – Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-50343 – Microsoft Install Service Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-50332 – Windows Kernel Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-50329 – Microsoft DWM Core Library Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-49805 – Win32k Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-49798 – Windows Kernel Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-49795 – Windows Kernel Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-49170 – Windows StateRepository API Server file Elevation of Privilege Vulnerability
Subscriptions Required
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
