Windows Installer vulnerabilities
21 known CVE vulnerabilities in Windows Installer, translated and rated.
- CVE-2014-1814High
The vulnerability in Windows Installer allows local users to gain elevated privileges via a crafted application that invokes the repair feature for a different application.
- CVE-2024-38014HighActively exploited
Elevation of privilege vulnerability in Windows Installer. An attacker could exploit it to gain elevated privileges.
- CVE-2026-70347High
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-70346High
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-70345High
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-70344High
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-65774High
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-62768High
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-61938High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-61925High
Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-59127High
A vulnerability in Windows Installer involves an integer overflow or wraparound, allowing an authorized attacker to elevate privileges locally.
- CVE-2026-58540High
Vulnerability in Windows Installer due to improper authorization. Allows an authorized attacker to elevate privileges locally.
- CVE-2026-50490High
A use-after-free vulnerability in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-20816High
Time-of-check time-of-use (TOCTOU) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2023-21800High
Elevation of privilege vulnerability in Windows Installer. Allows an attacker to gain elevated privileges on the system.
- CVE-2021-36962Medium
Information disclosure vulnerability in Windows Installer. Could allow an attacker to read sensitive data.
- CVE-2021-36961Medium
Denial of Service vulnerability in Windows Installer. Can lead to installation or system crashes.
- CVE-2021-34511High
A vulnerability in the Windows Installer allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
- CVE-2021-33765Medium
A vulnerability in Windows Installer allows spoofing. An attacker could exploit this flaw to impersonate a trusted source.
- CVE-2021-26862High
Elevation of privilege vulnerability in Windows Installer. An attacker could exploit it to gain elevated privileges on the system.
- CVE-2020-1078High
An elevation of privilege vulnerability exists in Windows Installer due to the way it handles certain filesystem operations. An attacker with unprivileged execution could run arbitrary code with elevated privileges, allowing them to install programs, view/change/delete data, or create new accounts with full user rights.

