CVE-2026-49165
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Microsoft Windows App Store has a use of uninitialized resource vulnerability that allows an authorized attacker to disclose information locally.
Risk Assessment
An authorized attacker can read sensitive data from memory, leading to a breach of information confidentiality.
Recommendation
Install the appropriate security update from Microsoft.
Other vulnerabilities in Microsoft Windows App Store
See all- CVE-2026-50356High
A race condition vulnerability in the Microsoft Windows App Store allows an authorized attacker to escalate privileges locally. Improper synchronization during concurrent resource access can be exploited to elevate privileges.
- CVE-2026-49784High
A race condition vulnerability in the Microsoft Windows App Store allows an authorized attacker to escalate privileges locally. Improper synchronization during concurrent resource access can be exploited to elevate privileges.
Original NVD description (English source)
Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally.