Windows App Installer vulnerabilities

3 known CVE vulnerabilities in Windows App Installer, translated and rated.

CVE-2026-50400High
Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-48572High
A race condition vulnerability was found in Windows App Installer due to improper synchronization of shared resources. This flaw allows an authorized attacker to elevate privileges locally.
CVE-2026-48571High
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS