CVE-2026-20816
HighCVSS 7.8Exploitation Probability (EPSS)
High risk82th percentile - higher than 82% of all known CVEs
Summary
Time-of-check time-of-use (TOCTOU) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker can exploit a race window to gain elevated privileges and compromise system integrity.
Recommendation
Install the latest Windows security updates from Microsoft.
Other vulnerabilities in Windows Installer
See all- CVE-2026-96308High
Use-after-free vulnerability in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-96307High
Use-after-free vulnerability in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-96305High
Use-after-free vulnerability in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-96302High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-88124High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-88080High
Use after free vulnerability in Windows Installer. An authorized attacker can elevate privileges locally.
- CVE-2026-88076High
Null pointer dereference vulnerability in Windows Installer. An authorized attacker can elevate privileges locally.
- CVE-2026-87715High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-87711High
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-87708High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS