CVE-2026-50347

Windows Data.dll Remote Code Execution Vulnerability

View on CVE.org
Published Jul 14, 2026 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Description
Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally.

Analysis

AI-generated

Technical impact

The vulnerability is a heap‑based buffer overflow in the Windows Data.dll component. This flaw arises from improper bounds checking when allocating heap memory, as described by CWE‑122 and CWE‑190. An attacker may trigger the overflow to run arbitrary code from a local context, granting local code execution on the affected system.

Affected Systems

The vulnerability impacts a wide range of Microsoft Windows operating systems, including Windows 10 (versions 1607, 1809, 21H2, 22H2), Windows 11 (versions 24H2, 25H2, 26H1) and Windows Server editions from 2012 up to 2025, regardless of the installation type (full or Server Core).

Risk and Exploitability

With a CVSS score of 7.8 the potential damage is high, but the EPSS score of less than 1 % indicates that exploitation in the wild is unlikely at present. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attack vector is local; an adversary would need to have some level of access to the target system to trigger the overflow and gain code execution capability.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the official Microsoft security update for CVE-2026-50347 to all affected Windows 10, 11, and Windows Server systems as soon as possible.
  • If an immediate update cannot be performed, isolate or sandbox the affected machines to prevent exploitation until the patch is available, and consider restricting network access to the vulnerability vector if feasible.
  • As a temporary mitigation, limit the privileges of local accounts that load the vulnerable Data.dll component, or run affected applications in a sandboxed environment to reduce the impact of potential exploitation.

Generated by OpenCVE AI on July 31, 2026 at 08:27 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Microsoft windows Server 2012 (server Core Installation)
Microsoft windows Server 2012 R2
Microsoft windows Server 2012 R2 (server Core Installation)
Microsoft windows Server 2016 (server Core Installation)
Microsoft windows Server 2019 (server Core Installation)
Microsoft windows Server 2025 (server Core Installation)
Vendors & Products Microsoft windows Server 2012 (server Core Installation)
Microsoft windows Server 2012 R2
Microsoft windows Server 2012 R2 (server Core Installation)
Microsoft windows Server 2016 (server Core Installation)
Microsoft windows Server 2019 (server Core Installation)
Microsoft windows Server 2025 (server Core Installation)
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally.
Title Windows Data.dll Remote Code Execution Vulnerability
First Time appeared Microsoft
Microsoft windows 10 1607
Microsoft windows 10 1809
Microsoft windows 10 21h2
Microsoft windows 10 22h2
Microsoft windows 11 24h2
Microsoft windows 11 25h2
Microsoft windows 11 26h1
Microsoft windows Server 2012
Microsoft windows Server 2012 R2
Microsoft windows Server 2016
Microsoft windows Server 2019
Microsoft windows Server 2022
Microsoft windows Server 2025
Weaknesses CWE-122
CWE-190
CPEs cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*
Vendors & Products Microsoft
Microsoft windows 10 1607
Microsoft windows 10 1809
Microsoft windows 10 21h2
Microsoft windows 10 22h2
Microsoft windows 11 24h2
Microsoft windows 11 25h2
Microsoft windows 11 26h1
Microsoft windows Server 2012
Microsoft windows Server 2012 R2
Microsoft windows Server 2016
Microsoft windows Server 2019
Microsoft windows Server 2022
Microsoft windows Server 2025
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}
Weaknesses
  • CWE-122

    Heap-based Buffer Overflow

  • CWE-190

    Integer Overflow or Wraparound

Sources

Status
PUBLISHED
Assigner
microsoft
Published
Updated
Nov 10, 2026, 10:37 PM
Reserved
Jun 4, 2026, 6:48 PM

View source JSON

Updated
Jul 14, 2026, 7:26 PM

JSON

Status
Analyzed
Published
Jul 14, 2026, 6:17 PM
Modified
Jul 22, 2026, 4:17 PM

View source JSON

No data.

Updated
Nov 11, 2026, 12:30 AM

JSON