CVE Catalog

CVE-2026-59127

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.31%

24th percentile - higher than 24% of all known CVEs

Summary

A vulnerability in Windows Installer involves an integer overflow or wraparound, allowing an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker with local access could gain elevated privileges, potentially leading to full system compromise.

Recommendation

Install the latest Windows security updates. Restrict the ability to run installers for unauthorized users.

Original NVD description (English source)

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS