CVE-2026-49803

HighCVSS 7.0

Published: 14/07/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

5th percentile - higher than 5% of all known CVEs

Summary

A race condition in the Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker could gain higher privileges, potentially leading to full system compromise.

Recommendation

Install the latest Windows security updates from Microsoft.

Other vulnerabilities in Windows AppX Deployment Service

CVE-2019-1130HighActively exploited
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker could exploit this to gain elevated privileges on the system.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.