CVE-2026-69945
HighCVSS 8.8Summary
Missing authorization in Windows AppX Deployment Extensions. An authorized attacker can exploit this flaw to elevate privileges locally.
Risk Assessment
An attacker with valid credentials could locally elevate privileges, resulting in unauthorized access to protected system resources.
Recommendation
Install Microsoft security updates for Windows AppX Deployment Extensions and enforce least privilege for local accounts.
Other vulnerabilities in Windows AppX Deployment Extensions
See all- CVE-2019-1385HighActively exploited
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. An authenticated attacker would need to run a specially crafted application to elevate privileges.
- CVE-2021-34462High
Elevation of Privilege vulnerability in Windows AppX Deployment Extensions. Allows a local attacker to gain higher privileges.
Original NVD description (English source)
Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS