What is the CVSS score of CVE-2026-27910?

CVE-2026-27910 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Microsoft are affected by CVE-2026-27910?

CVE-2026-27910 is a Windows Installer privilege escalation affecting Windows 10, 11, and Server 2012-2025 that allows authenticated local users to gain SYSTEM-level access, potentially compromising…. A patch is available.

How to fix or mitigate CVE-2026-27910?

Within 24 hours: Inventory all affected Windows 10, 11, and Server 2012-2025 systems and prioritize patching for systems with multiple local user accounts or contractor access. Within 7 days: Deploy vendor-released patches across all affected platforms; verify patch application through WSUS or endpoint management tools. Within 30 days: Complete full remediation across the organization and validate patch compliance via automated scanning.

Microsoft CVE-2026-27910

EUVD-2026-22449 HIGH

Improper Handling of Insufficient Permissions or Privileges (CWE-280)

2026-04-14 microsoft

GHSA-3wgf-ccpx-rv72

Information Disclosure Microsoft

7.8

CVSS 3.1 · NVD

Temporal: 6.8

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

ENISA EUVD

HIGH

qualitative

CIRCL (temporal)

6.8 MEDIUM

cvss

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Re-analysis Queued

Apr 17, 2026 - 15:22 vuln.today

cvss_changed

Analysis Generated

Apr 14, 2026 - 19:28 vuln.today

EUVD ID Assigned

Apr 14, 2026 - 17:46 euvd

EUVD-2026-22449

Analysis Generated

Apr 14, 2026 - 17:46 vuln.today

Patch released

Apr 14, 2026 - 17:46 nvd

Patch available

CVE Published

Apr 14, 2026 - 16:58 nvd

HIGH 7.8

DescriptionCVE.org

Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally.

AnalysisAI

Windows Installer privilege escalation via improper permission handling enables authenticated local users to gain SYSTEM-level access across all supported Windows 10, 11, and Server platforms (2012-2025). The vulnerability (CWE-280: Improper Handling of Insufficient Privileges) requires low-privilege local access but offers complete system compromise with low attack complexity. CVSS 7.8 High severity reflects full confidentiality, integrity, and availability impact. Vendor-released patches are a

Technical ContextAI

The vulnerability resides in the Windows Installer service (msiexec.exe), a core Windows component responsible for installing, maintaining, and removing software via MSI packages. CWE-280 indicates the service fails to properly validate or enforce permission boundaries when processing installation operations, allowing a low-privileged user to manipulate the installer's trusted execution context. Windows Installer runs with SYSTEM privileges to perform protected file operations and registry modifications. The improper privilege handling creates a confused deputy scenario where an authenticated user can leverage the service's elevated privileges without proper authorization checks. Affected products span the entire modern Windows ecosystem: client platforms (Windows 10 versions 1607/1809/21H2/22H2, Windows 11 versions 22H3/23H2/24H2/25H2/26H1) and server platforms (Windows Server 2012/2012 R2/2016/2019/2022/2022 23H2/2025), including Server Core installations. The vulnerability persists across Windows NT kernel versions 6.2 through 10.0, indicating a long-standing architectural issue in privilege boundary enforcement within the installer framework.

RemediationAI

Apply Microsoft security updates immediately through Windows Update, WSUS, or Configuration Manager to upgrade to patched versions. For Windows 10 Version 1607, update to build 10.0.14393.9060 or later. For Windows 10 Version 1809 and Windows Server 2019, update to 10.0.17763.8644 or later. Windows 10 Version 21H2 requires build 10.0.19044.7184 or later, while Version 22H2 requires 10.0.19045.7184 or later. Windows 11 Version 22H3 and 23H2 systems should update to build 10.0.22631.6936 or later. Windows 11 Version 24H2 and Windows Server 2025 require build 10.0.26100.32690 or later, Version 25H2 requires 10.0.26200.8246 or later, and Version 26H1