Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.0
CVE-2026-48572: Windows App Installer Privilege Elevation Vulnerability
CVE-2026-48572 · published 3 months ago
Summary
An attacker with authorized access can potentially elevate their privileges on a Windows system, allowing them to access sensitive areas of the system. This vulnerability affects Windows systems that use the App Installer. To protect against this vulnerability, ensure you're running the latest version of Windows and apply any available security updates.
What to do
- Update microsoft windows 11 version 23h2 to version 10.0.22631.7376 or later.
- Update microsoft windows 11 version 24h2 to version 10.0.26100.8875 or later.
- Update microsoft windows 11 version 25h2 to version 10.0.26200.8875 or later.
- Update microsoft windows 11 version 26h1 to version 10.0.28000.2269 or later.
- Update microsoft windows server 2025 to version 10.0.26100.33158 or later.
- Update microsoft windows server 2025 (server core installation) to version 10.0.26100.33158 or later.
- Update microsoft windows_11_23h2 to version 10.0.22631.7376 or later.
- Update microsoft windows_11_24h2 to version 10.0.26100.8875 or later.
- Update microsoft windows_11_25h2 to version 10.0.26200.8875 or later.
- Update microsoft windows_11_26h1 to version 10.0.28000.2269 or later.
- Update microsoft windows_server_2025 to version 10.0.26100.33158 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows 11 version 23h2 | < 10.0.22631.7376 |
| microsoft | windows 11 version 24h2 | < 10.0.26100.8875 |
| microsoft | windows 11 version 25h2 | < 10.0.26200.8875 |
| microsoft | windows 11 version 26h1 | < 10.0.28000.2269 |
| microsoft | windows server 2025 | < 10.0.26100.33158 |
| microsoft | windows server 2025 (server core installation) | < 10.0.26100.33158 |
| microsoft | windows_11_23h2 |
< 10.0.22631.7376 cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:* |
| microsoft | windows_11_24h2 |
< 10.0.26100.8875 cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:* |
| microsoft | windows_11_25h2 |
< 10.0.26200.8875 cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:* |
| microsoft | windows_11_26h1 |
< 10.0.28000.2269 cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:* |
| microsoft | windows_server_2025 |
< 10.0.26100.33158 cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:* |
Original advisory text
Windows App Package Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer allows an authorized attacker to elevate privileges locally.
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48572 vendor-advisory patch
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-362Race Condition
CWE-416Use After Free
Timeline
Published14 Jul 2026
Updated29 Oct 2026
First seen14 Jul 2026
Track software like this
Free during beta