55 matches found
KLA91202 PE vulnerability in Microsoft Apps
Privilege escalation vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-68821 Exploitation Related products App-Installer CVE list CVE-2026-68821 critical KB list Solution Install necessary updates from the KB...
CVE-2026-47122 Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection
Sparkle is a software update framework for macOS. In versions up to and including 2.9.1, Autoupdate/AppInstaller.m's shouldAcceptNewConnection: only enforces SUCodeSigningVerifier validateConnection: before stage 1 completes. After performedStage1Installation = YES, new connections to the...
EUVD-2026-43863
Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally...
EUVD-2026-43973
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...
EUVD-2026-43974
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-50400
Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-48571
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-48572
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-48571
The CVE-2026-48571 entry concerns a use-after-free vulnerability in Windows App Installer that enables an authorized attacker to achieve local privilege escalation. Affected component: Windows App Installer (Windows App Package Installer). Root cause: use-after-free condition leading to elevated ...
CVE-2026-48572
CVE-2026-48572 describes a race condition in Windows App Installer caused by concurrent execution on a shared resource with improper synchronization. An authorized attacker could elevate privileges locally. The CVE entry cites a high-severity score (CVSS 3.1: High) with local attack vector, high ...
Windows App Package Installer Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally...
Windows App Package Installer Elevation of Privilege Vulnerability
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally...
Windows App Package Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-48571: Use After Free
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-50400: Stack-based Buffer Overflow
Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-48572: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...
PT-2026-58379
Name of the Vulnerable Software and Affected Versions Windows App Installer affected versions not specified Description A stack-based buffer overflow occurs in Windows App Installer, which allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow is a condition...
PT-2026-58136
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...
PT-2026-58135
Name of the Vulnerable Software and Affected Versions Windows App Installer affected versions not specified Description A use-after-free condition exists in Windows App Installer, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...
