7670 matches found
CVE-2026-48572
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-58540 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-58540
CVE-2026-58540 is a Windows Installer elevation-of-privilege vulnerability. The issue arises from improper authorization in Windows Installer, enabling a locally authenticated attacker to gain elevated privileges. CVSSv3.1 metrics (Microsoft-supplied) indicate a local attack vector, low attack co...
CVE-2026-58540 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-50490 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-50490 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-50490
CVE-2026-50490 describes a use-after-free vulnerability in Windows Installer that could allow an authenticated, locally located attacker to elevate privileges. The initial description confirms local privilege escalation with high impact (CVE ID: 2026-50490; vulnerable component: Windows Installer...
CVE-2026-50400 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-50400
CVE-2026-50400 is a Windows App Installer elevation-of-privilege vulnerability caused by a stack-based buffer overflow. An attacker with local, low-privilege access could exploit this to gain higher privileges on the system. Public sources confirm a local-execution path via Windows App Installer ...
CVE-2026-50400 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48571
The CVE-2026-48571 entry concerns a use-after-free vulnerability in Windows App Installer that enables an authorized attacker to achieve local privilege escalation. Affected component: Windows App Installer (Windows App Package Installer). Root cause: use-after-free condition leading to elevated ...
CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48572
CVE-2026-48572 describes a race condition in Windows App Installer caused by concurrent execution on a shared resource with improper synchronization. An authorized attacker could elevate privileges locally. The CVE entry cites a high-severity score (CVSS 3.1: High) with local attack vector, high ...
Windows App Package Installer Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally...
Windows App Package Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...