CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability

...

CVE-2026-48572

CVE-2026-48572 describes a race condition in Windows App Installer caused by concurrent execution on a shared resource with improper synchronization. An authorized attacker could elevate privileges locally. The CVE entry cites a high-severity score (CVSS 3.1: High) with local attack vector, high ...

CVE-2026-42900

The CVE-2026-42900 entry concerns a race condition caused by improper synchronization in the Windows App Store. Reported impact is privilege elevation over a network, implying an unauthorized attacker could exploit a timing-related flaw to escalate access. Documents consistently describe a concur...

CVE-2026-42900 Microsoft Windows App Store Elevation of Privilege Vulnerability

...

CVE-2026-42900 Microsoft Windows App Store Elevation of Privilege Vulnerability

...

CVE-2026-58478

creationtimestamp| type| source ---|---|--- 2026-07-14 16:09:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmlryr46i26 2026-07-22 05:12:26+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mr7krqjcu722...

Windows App Package Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally...

Windows App Package Installer Elevation of Privilege Vulnerability

Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows App Store Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Store allows an unauthorized attacker to elevate privileges over a network...

Microsoft Windows App Store Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...

Microsoft Bing App for IOS Spoofing Vulnerability

Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network...

Windows App Package Installer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows App Store Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...

Microsoft Windows App Store Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally...

CVE-2026-54429

creationtimestamp| type| source ---|---|--- 2026-07-14 10:40:14+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqlzeisz3w2x 2026-07-14 12:05:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm64qfivx2k 2026-07-14 12:45:10+00:00| seen|...

CVE-2026-15677

creationtimestamp| type| source ---|---|--- 2026-07-14 09:45:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlwbuuw7m2e 2026-07-19 20:04:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzlaxlqca2p...

CVE-2026-59961

creationtimestamp| type| source ---|---|--- 2026-07-14 08:28:11+00:00| seen| https://bsky.app/profile/troglobit.com/post/3mqlryf65pc2o...

CVE-2026-60103

creationtimestamp| type| source ---|---|--- 2026-07-14 03:59:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlcy6xwtb26 2026-07-16 08:21:44+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqskp7enn2q...

CVE-2026-12271

creationtimestamp| type| source ---|---|--- 2026-07-14 03:14:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlai7m3x32c...

Malicious code in flick-test-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f05e70375ac31032fb4fc3abf302d1c1122bf01504f810aa74d9fe59066d36 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...