CVE-2026-48572

HighCVSS 7.0

Published: 14/07/2026(UTC)Updated: 16/07/2026(UTC)Translated: 17/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

6th percentile - higher than 6% of all known CVEs

Summary

A race condition vulnerability was found in Windows App Installer due to improper synchronization of shared resources. This flaw allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker with limited privileges could exploit this vulnerability to gain higher privileges on the system, potentially leading to control over applications or data.

Recommendation

It is recommended to immediately apply the security update provided by the vendor for the Windows App Installer component.

Other vulnerabilities in Windows App Installer

See all

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer allows an authorized attacker to elevate privileges locally.