CVE Catalog
CVE-2026-48571
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk0.21%
12th percentile - higher than 12% of all known CVEs
Summary
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally.
Risk Assessment
Privilege escalation could allow the attacker to install unauthorized software or modify existing applications.
Recommendation
Install the security update from Microsoft for Windows App Installer.
Other vulnerabilities in Windows App Installer
See all- CVE-2026-50400High
Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-48572High
A race condition vulnerability was found in Windows App Installer due to improper synchronization of shared resources. This flaw allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally.