EUVD-2026-73723

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-69441

CVE-2026-69441 is a race condition vulnerability in Windows Installer , caused by concurrent execution using a shared resource with improper synchronization . An authorized attacker can exploit this to elevate privileges locally . The vulnerability is rated CVSS 7.0 (HIGH) with a local attack vec...

CVE-2026-54611 InstantCMS has Remote Code Execution in package installer

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...

CVE-2026-54611

InstantCMS , a free and open-source content management system, contains a Remote Code Execution vulnerability in its component installer in versions prior to 2.18.2 . A remote authenticated attacker can upload a malicious component; although the component is not formally installed, the uploaded P...

CVE-2026-54611 InstantCMS has Remote Code Execution in package installer

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...

EUVD-2026-73561

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...

CVE-2026-54611 InstantCMS has Remote Code Execution in package installer

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...

EUVD-2026-73283

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-77894

CVE-2026-77894 is a local privilege escalation vulnerability in Windows Installer caused by a race condition — specifically, concurrent execution of a shared resource with improper synchronization. An authorized attacker with low privileges can exploit this to gain high integrity over confidentia...

CVE-2026-72929

CVE-2026-72929 is an elevation of privilege vulnerability in Windows Installer , caused by improper validation of an integrity check value . An authorized local attacker can exploit this to gain elevated privileges, with the CVSS 3.1 base score of 7.8 (HIGH) reflecting full impact on confidential...

EUVD-2026-73105

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-71339

CVE-2026-71339 is a heap-based buffer overflow in Windows Installer that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 6.7 (MEDIUM) with a vector of AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating that while high privileges are required, the impact on confident...

EUVD-2026-73097

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-73166

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-62694

CVE-2026-62694 is a use-after-free vulnerability in Windows Installer that allows a locally authenticated attacker with low privileges to escalate privileges . The attack requires high complexity and no user interaction , with high impact on confidentiality, integrity, and availability (CVSS 3.1:...

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Windows Installer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

Windows Installer Elevation of Privilege Vulnerability

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...

Windows Installer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...