CVE-2026-87715

A Use after free vulnerability exists in Windows Installer , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified as HIGH severity (CVSS 3.1 score of 7.0). No specific exploit details or in-the-wild exploitation information are provided ...

CVE-2026-87700

A Use after free vulnerability exists in Windows Installer , which may allow an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 . While specific affected versions or detailed root causes are not provided in the documents, a remediation leve...

CVE-2026-87693

A use after free vulnerability exists in Windows Installer that allows an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by a high base severity score of 7.0 and impacts confidentiality, integrity, and availability. No specific exploit links or deta...

CVE-2026-88076

A null pointer dereference vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with the impact affecting confidentiality, integrity, and availability. No specific exploit deta...

CVE-2026-87694

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a High base severity (CVSS 3.1 score of 7.8). While the technical root cause is identified as a use after free, specific file paths or func...

CVE-2026-87704

A Use after free vulnerability exists in Windows Installer which allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . Technical details regarding the specific root cause or affected versions are not provided in the documents, but t...

CVE-2026-85941

A race condition exists in Windows Installer due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege elevation . The impact includes high levels of confidentiality, integrity, and availability. ...

CVE-2026-83899

A local privilege escalation vulnerability exists in the Windows Installer component due to improper privilege management . An authorized attacker can exploit this flaw to elevate their privileges locally on an affected system. The vulnerability is associated with CWE-362 (Race Condition). No spe...

CVE-2026-83767

A stack-based buffer overflow vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local privilege escalation on affected systems. The vulnerability is characterized by a High severity base score of 7.8. No specific details regarding exploi...

CVE-2026-83752

A Use after free vulnerability exists in Windows Installer which allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . While the documents confirm the existence of the flaw and its potential impact on local privileges, no specific e...

CVE-2026-83717

A Use after free vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to achieve local privilege escalation . Exploitation details are not provided in the documents. Remediation is available via an official fix .

CVE-2026-83718

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability results in high impact regarding confidentiality, integrity, and availability. Official remediation is available via Microsoft. No specific exploit code or i...

CVE-2026-83702

A Use after free vulnerability exists in Windows Installer , which allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.0 (High), with impact across confidentiality, integrity, and availability. Official remediation is available via Microsoft.

CVE-2026-83676

The Windows Installer component is vulnerable to an integer underflow (wrap or wraparound) . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed, specific technical details regarding the affected functions or files are not provided ...

CVE-2026-83680

A heap-based buffer overflow vulnerability exists in Windows Installer . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (HIGH) . While the technical root cause is identified as a heap overflow, no specific exploit ...

CVE-2026-83672

A vulnerability in Windows Installer allows an authorized attacker to disclose sensitive system information locally. This flaw is categorized as an exposure of sensitive system information to an unauthorized control sphere (CWE-497). While the CVSS 3.1 score of 4.7 (Medium) reflects a high confid...

CVE-2026-69471

A heap-based buffer overflow exists in the Windows Installer component. This vulnerability allows an authorized attacker to achieve local privilege escalation . The documentation identifies the root cause as a heap-based buffer overflow (CWE-122) and an out-of-bounds read (CWE-125). While the CVS...

CVE-2026-69635

A heap-based buffer overflow exists in Windows Installer , which could allow an authorized attacker to elevate privileges through a physical attack . The vulnerability is associated with CWE-122 . No specific exploit details or in-the-wild exploitation information are provided in the documents. R...

CVE-2026-96305

A Use after free vulnerability exists in Windows Installer . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability's technical root cause is identified as CWE-416 , specific details regarding the affected component or function are not provided. No ...

CVE-2026-96307

A Use after free vulnerability exists in Windows Installer . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 base score is 7.0 (High) , reflecting impacts on confidentiality, integrity, and availability. No specific exploit code or detailed remediation ...