Microsoft · Security update · July 14, 2026

KB5101004: July 2026 security update

KB5101004, released July 14, 2026, fixes 17 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
17
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0402
90th percentile

Priority of the 17 CVEs

Patch now 0 Urgent 0 High 15 Routine 2

Applies to

Product
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based Systems
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for x64-based Systems

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2026-50646 .NET Framework Remote Code Execution 7.8 0.0402 Exploitation Less Likely
High CVE-2026-50649 .NET Remote Code Execution 7.8 0.0402 Exploitation Less Likely
High CVE-2026-50652 Azure Active Directory Denial of Service 7.5 0.0173 Exploitation Less Likely
High CVE-2026-47302 .NET Denial of Service 7.5 0.0117 Exploitation Less Likely
High CVE-2026-50304 Active Directory Federation Services (AD FS) Denial of Service 7.5 0.0117 Exploitation Unlikely
High CVE-2026-50355 Active Directory Federation Services (AD FS) Denial of Service 7.5 0.0117 Exploitation Less Likely
High CVE-2026-50368 Active Directory Federation Services (AD FS) Denial of Service 7.5 0.0117 Exploitation Unlikely
High CVE-2026-50411 Active Directory Federation Services (AD FS) Denial of Service 7.5 0.0117 Exploitation Less Likely
High CVE-2026-50525 .NET Denial of Service 7.5 0.0117 Exploitation Less Likely
High CVE-2026-50527 .NET Framework Denial of Service 7.5 0.0117 Exploitation Less Likely
High CVE-2026-50647 Active Directory Federation Services (AD FS) Denial of Service 7.5 0.0117 Exploitation Less Likely
High CVE-2026-50648 .NET Framework Denial of Service 7.5 0.0117 Exploitation Less Likely
High CVE-2026-50653 Azure Active Directory Denial of Service 7.5 0.0117 Exploitation Less Likely
High CVE-2026-50650 .NET Framework Elevation of Privilege 7.8 0.0046 Exploitation Less Likely
High CVE-2026-47304 .NET Security Feature Bypass 9.8 0.0029 Exploitation Less Likely
Routine CVE-2026-50324 Active Directory Federation Services (AD FS) Denial of Service 5.9 0.0086 Exploitation Less Likely
Routine CVE-2026-50659 .NET Spoofing 6.5 0.0074 Exploitation Less Likely
Showing 1 to 17 of 17 1