CVE-2026-20816
HighCVSS 7.8Exploitation Probability (EPSS)
High risk82th percentile - higher than 82% of all known CVEs
Summary
Time-of-check time-of-use (TOCTOU) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker can exploit a race window to gain elevated privileges and compromise system integrity.
Recommendation
Install the latest Windows security updates from Microsoft.
Other vulnerabilities in Windows Installer
See all- CVE-2014-1814High
The vulnerability in Windows Installer allows local users to gain elevated privileges via a crafted application that invokes the repair feature for a different application.
- CVE-2024-38014HighActively exploited
Elevation of privilege vulnerability in Windows Installer. An attacker could exploit it to gain elevated privileges.
- CVE-2020-0683HighActively exploited
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, known as 'Windows Installer Elevation of Privilege Vulnerability'.
- CVE-2026-96308High
Use-after-free vulnerability in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-96307High
Use-after-free vulnerability in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-96305High
Use-after-free vulnerability in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-96302High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-88124High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-88080High
Use after free vulnerability in Windows Installer. An authorized attacker can elevate privileges locally.
- CVE-2026-88076High
Null pointer dereference vulnerability in Windows Installer. An authorized attacker can elevate privileges locally.
Original NVD description (English source)
Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS