Microsoft update

KB5099415

IE Cumulative

Fixed in

TI-2026-37216 CVE-2026-50480 · GHSA-8c44-h2jq-c85w

LOW 36

Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-07-14 Fixed in 10.0.14393.9339, 6.2.9200.26226 +1 CWE-122