CVE-2026-49784
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A race condition vulnerability in the Microsoft Windows App Store allows an authorized attacker to escalate privileges locally. Improper synchronization during concurrent resource access can be exploited to elevate privileges.
Risk Assessment
The organization risks that an authorized user gains higher privileges, potentially leading to unauthorized access to sensitive data or the system.
Recommendation
Install the latest security updates from Microsoft for Windows that address this vulnerability.
Other vulnerabilities in Microsoft Windows App Store
See all- CVE-2026-50356High
A race condition vulnerability in the Microsoft Windows App Store allows an authorized attacker to escalate privileges locally. Improper synchronization during concurrent resource access can be exploited to elevate privileges.
- CVE-2026-49165High
Microsoft Windows App Store has a use of uninitialized resource vulnerability that allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.