Skip to main content
7 reportsPriority Low

Windows Installer Elevation of Privilege Vulnerability

A series of vulnerabilities in Windows Installer have been disclosed, allowing authorised users to escalate privileges on local systems.

First report Latest

What is going on

  • A vulnerability in Windows Installer was reported, enabling an authorised attacker to elevate privileges locally.
  • Further reports detailed a use after free flaw in Windows Installer that could allow privilege escalation.
  • A heap-based buffer overflow in Windows Installer was also disclosed, with similar potential for privilege elevation.
  • Additional vulnerabilities in Windows Installer were reported, all relating to privilege escalation opportunities for authorised users.
  • Multiple CVEs have been assigned to the various flaws in Windows Installer affecting privilege management.
  • The latest reports confirm ongoing disclosure of vulnerabilities in Windows Installer related to elevation of privilege.
  • What to watch: Further details on the specific exploitation methods or confirmed incidents involving these vulnerabilities.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed