EUVD-2026-73105
GHSA-43fc-f68q-94c4
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local access with low privileges required; AC:L as no special conditions apply; full CIA impact matches SYSTEM-level EoP via Installer.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.
AnalysisAI
Privilege escalation in Windows Installer affects Windows 11 (23H2, 24H2, 25H2, 26H1) and Windows Server 2025, allowing a locally authenticated low-privileged attacker to gain full SYSTEM-level control by exploiting improper validation of integrity check values (CWE-354). The CVSS vector (AV:L/PR:L) confirms local exploitation requiring only a standard user account, with no user interaction needed once access is established. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a local authenticated session with at minimum a standard (low-privilege) user account - remote unauthenticated exploitation is not possible given AV:L/PR:L. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | CVSS 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) accurately reflects a high-severity local EoP: the attack is straightforward (AC:L), requires only a standard user account (PR:L), and achieves full CIA compromise - consistent with SYSTEM-level privilege acquisition. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update that addresses CVE-2026-72929, targeting the build thresholds listed above: Windows 11 23H2 → 10.0.22631.7582 or later; Windows 11 24H2 / Server 2025 → 10.0.26100.9445 (client) / 10.0.26100.33438 (server) or later; Windows 11 25H2 → 10.0.26200.9445 or later; Windows 11 26H1 → 10.0.28000.2954 or later. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Windows 11 and Windows Server 2025 systems by specific build version (23H2, 24H2, 25H2, 26H1 for Windows 11) to establish patching scope. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today