CVE-2026-70345

HighCVSS 7.8

Published: 11/08/2026(UTC)Updated: 16/08/2026(UTC)Translated: 11/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

An authorized user could exploit this vulnerability to gain higher privileges, potentially leading to system takeover.

Install the latest security updates for Windows Installer.

Original NVD description (English source)

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.