Windows Installer vulnerabilities
65 known CVE vulnerabilities in Windows Installer, translated and rated.
- CVE-2014-1814High
The vulnerability in Windows Installer allows local users to gain elevated privileges via a crafted application that invokes the repair feature for a different application.
- CVE-2024-38014HighActively exploited
Elevation of privilege vulnerability in Windows Installer. An attacker could exploit it to gain elevated privileges.
- CVE-2020-0683HighActively exploited
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, known as 'Windows Installer Elevation of Privilege Vulnerability'.
- CVE-2026-96308High
Use-after-free vulnerability in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-96307High
Use-after-free vulnerability in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-96305High
Use-after-free vulnerability in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-96302High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-88124High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-88080High
Use after free vulnerability in Windows Installer. An authorized attacker can elevate privileges locally.
- CVE-2026-88076High
Null pointer dereference vulnerability in Windows Installer. An authorized attacker can elevate privileges locally.
- CVE-2026-87715High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-87711High
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-87708High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-87704High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-87700High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-87694High
A use-after-free vulnerability in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-87693High
A use-after-free vulnerability in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-85941High
A concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-85830Medium
An out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
- CVE-2026-85796High
A numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-85374Medium
An out-of-bounds read vulnerability in Windows Installer allows an authorized attacker to disclose information locally. The issue involves improper reading beyond buffer boundaries.
- CVE-2026-85366High
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-85364High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-85361High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-85358High
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-83899High
Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-83779High
A heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-83775High
A race condition (concurrent execution using shared resource with improper synchronization) in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-83767High
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-83752High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Exploitation may enable obtaining higher privileges on the system.
- CVE-2026-83718High
A use after free vulnerability in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-83717High
A use after free vulnerability in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-83708High
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-83702High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-83680High
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-83676High
Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-83672Medium
Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.
- CVE-2026-70272High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-69635Medium
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.
- CVE-2026-69471High
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-108468High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-77894High
A race condition in Windows Installer due to improper synchronization of shared resources allows an authorized attacker to elevate privileges locally.
- CVE-2026-72929High
Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-71339Medium
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-69441High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-62694High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-70347High
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-70346High
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-70345High
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-70344High
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

