App Installer
Monthly
Privilege escalation in Windows App Installer (the App Installer component of Windows Package Manager, aka winget) allows an authenticated local attacker with standard user privileges to fully compromise confidentiality, integrity, and availability of the affected system. The flaw stems from improper privilege management (CWE-269), meaning the application fails to correctly enforce privilege boundaries during its operations. No active exploitation is confirmed - CISA KEV does not list this CVE, SSVC rates exploitation as 'none', and EPSS sits at only 0.33% (26th percentile) - but the SSVC technical impact rating of 'total' reflects the severity of a successful local privilege escalation to full system control.
We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. Public exploit code available.
Windows App Installer Spoofing Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.
Privilege escalation in Windows App Installer (the App Installer component of Windows Package Manager, aka winget) allows an authenticated local attacker with standard user privileges to fully compromise confidentiality, integrity, and availability of the affected system. The flaw stems from improper privilege management (CWE-269), meaning the application fails to correctly enforce privilege boundaries during its operations. No active exploitation is confirmed - CISA KEV does not list this CVE, SSVC rates exploitation as 'none', and EPSS sits at only 0.33% (26th percentile) - but the SSVC technical impact rating of 'total' reflects the severity of a successful local privilege escalation to full system control.
We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. Public exploit code available.
Windows App Installer Spoofing Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.