← All advisories

Medium severity5.9NVD Advisory· Published Mar 10, 2026· Updated Jun 17, 2026

CVE-2026-23656

CVE-2026-23656

Description

Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network.

Affected products

3

Microsoft/Windows App Installerllm-fuzzy
Microsoft/Windows App
cpe:2.3:a:microsoft:windows_app:*:*:*:*:*:windows:*:*
Range: <2.0.964.0
Microsoft/Remote Desktop app for Windowscpe-rescue
Range: 1.00

Patches

Vulnerability mechanics

References

1

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23656nvdVendor Advisory

News mentions

0

No linked articles in our index yet.