CVE Catalog

CVE-2026-70344

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.31%

24th percentile - higher than 24% of all known CVEs

Summary

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Risk Assessment

An authorized user could exploit this vulnerability to gain higher privileges, potentially leading to system takeover.

Recommendation

Install the latest security updates for Windows Installer.

Original NVD description (English source)

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS