CVE Catalog
CVE-2026-61938
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk0.25%
16th percentile - higher than 16% of all known CVEs
Summary
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Risk Assessment
A local attacker could exploit the flaw to elevate privileges, potentially leading to unauthorized software installation or system takeover.
Recommendation
Apply the latest Windows security updates.
Original NVD description (English source)
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.