CVE-2026-68821 Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally

Description

Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally.

Affected products and versions

Product	Affected versions	Fixed in
App Installer 1.0	1.0.0.0 → < 1.29.279	1.29.279

Other CVEs of App Installer

The 3 CVEs of App Installer →

CVE-2024-38177 Windows App Installer Spoofing Vulnerability 7.8 High CVE-2021-43890 Microsoft Windows AppX Installer Spoofing Vulnerability 7.1 High