Windows Installer
by Microsoft
CVEs (76)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-0683 | Hig | 0.66 | 7.8 | 0.08 | KEV | Feb 11, 2020 | An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686. | |
| CVE-2024-38014 | Hig | 0.63 | 7.8 | 0.06 | KEV | Sep 10, 2024 | Windows Installer Elevation of Privilege Vulnerability | |
| CVE-2021-41379 | Med | 0.55 | 5.5 | 0.19 | KEV | Nov 10, 2021 | Windows Installer Elevation of Privilege Vulnerability | |
| CVE-2021-43883 | Hig | 0.52 | 7.8 | 0.12 | Dec 15, 2021 | Windows Installer Elevation of Privilege Vulnerability | ||
| CVE-2026-72929 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70347 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70346 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70345 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70344 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-65774 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62768 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-61925 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-59127 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-27910 | Hig | 0.51 | 7.8 | 0.00 | Apr 14, 2026 | Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-20816 | Hig | 0.51 | 7.8 | 0.02 | Jan 13, 2026 | Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-62571 | Hig | 0.51 | 7.8 | 0.00 | Dec 9, 2025 | Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-50173 | Hig | 0.51 | 7.8 | 0.01 | Aug 12, 2025 | Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-33075 | Hig | 0.51 | 7.8 | 0.01 | Jun 10, 2025 | Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-32714 | Hig | 0.51 | 7.8 | 0.01 | Jun 10, 2025 | Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-27727 | Hig | 0.51 | 7.8 | 0.01 | Apr 8, 2025 | Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally. |
- risk 0.66cvss 7.8epss 0.08
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.
- risk 0.63cvss 7.8epss 0.06
Windows Installer Elevation of Privilege Vulnerability
- risk 0.55cvss 5.5epss 0.19
Windows Installer Elevation of Privilege Vulnerability
- risk 0.52cvss 7.8epss 0.12
Windows Installer Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.00
Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.02
Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.
Page 1 of 4