CVE-2026-49165

The CVE-2026-49165 entry concerns the Microsoft Windows App Store. The connected sources confirm that the vulnerability arises from use of an uninitialized resource, enabling an authorized local attacker to disclose information. Impact is information disclosure with local access; CVSS 3.1 factors...

CVE-2026-49165 Microsoft Windows App Store Information Disclosure Vulnerability

...

CVE-2026-49165 Microsoft Windows App Store Information Disclosure Vulnerability

...

CVE-2026-48571

The CVE-2026-48571 entry concerns a use-after-free vulnerability in Windows App Installer that enables an authorized attacker to achieve local privilege escalation. Affected component: Windows App Installer (Windows App Package Installer). Root cause: use-after-free condition leading to elevated ...

CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability

...

CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability

...

CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability

...

CVE-2026-48572

CVE-2026-48572 describes a race condition in Windows App Installer caused by concurrent execution on a shared resource with improper synchronization. An authorized attacker could elevate privileges locally. The CVE entry cites a high-severity score (CVSS 3.1: High) with local attack vector, high ...

CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability

...

CVE-2026-42900 Microsoft Windows App Store Elevation of Privilege Vulnerability

...

CVE-2026-42900 Microsoft Windows App Store Elevation of Privilege Vulnerability

...

CVE-2026-42900

The CVE-2026-42900 entry concerns a race condition caused by improper synchronization in the Windows App Store. Reported impact is privilege elevation over a network, implying an unauthorized attacker could exploit a timing-related flaw to escalate access. Documents consistently describe a concur...

CVE-2026-58478

creationtimestamp| type| source ---|---|--- 2026-07-14 16:09:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmlryr46i26 2026-07-22 05:12:26+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mr7krqjcu722...

Microsoft Windows App Store Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...

Windows App Package Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows App Store Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...

Microsoft Bing App for IOS Spoofing Vulnerability

Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network...

Microsoft Windows App Store Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally...

Windows App Package Installer Elevation of Privilege Vulnerability

Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally...

Windows App Package Installer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...