5.9
Medium
CVE-2026-23656 Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform…
Description
Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows App Client for Windows Desktop 1.00 | 1.00 → < 2.0.964 | 2.0.964 |
References
- Windows App Installer Spoofing Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows App Client for Windows Desktop
The 20 CVEs of Windows App Client for Windows Desktop →
CVE-2026-59133
Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker…
8.8
High
CVE-2026-59124
Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker…
9.8
Critical
CVE-2026-42985
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network
8.8
High
CVE-2026-44801
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network
7.5
High