CVE Catalog

CVE-2026-61925

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.32%

25th percentile - higher than 25% of all known CVEs

Summary

Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker could exploit this to gain elevated privileges, potentially leading to unauthorized system changes.

Recommendation

Apply the latest security updates from Microsoft.

Original NVD description (English source)

Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS