Elevation of Privilege Vulnerability in Windows App Installer by Microsoft
CVE-2026-48571

7HIGH

Key Information:

Vendor: Microsoft
Status: Windows 11 Version 23h2; Windows 11 Version 23h2; Windows 11 Version 24h2; Windows 11 Version 25h2
Vendor: CVE Published:; 14 July 2026

What is CVE-2026-48571?

The Windows App Installer contains a use-after-free vulnerability that allows a local unauthorized attacker to escalate privileges. This type of vulnerability can lead to unauthorized access and potentially allow malicious activities within the affected system. It is essential for users of the Windows App Installer to apply the relevant patches to mitigate this risk.

Affected Version(s)

Windows 11 version 23H2 ARM64-based Systems 10.0.22631.0 < 10.0.22631.7376

Windows 11 Version 23H2 x64-based Systems 10.0.22631.0 < 10.0.22631.7376

Windows 11 Version 24H2 ARM64-based Systems 10.0.26100.0 < 10.0.26100.8875

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...

vendor-advisorypatch

CVSS V3.1

Score:

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

High

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 14, 2026
Vulnerability Reserved
May 21, 2026

CVE-2026-48571 Data

JSON