High 7.8

Windows Installerの脆弱性で、ローカルから管理者権限を奪われるおそれ

CVE-2026-105507 First seen on SecPulse 03:20

Summary

Windows Installerの入力値の検証が不十分なため、ライブラリが不適切に読み込まれ、ローカルで認証済みの攻撃者が高い権限で任意のコードを実行できる脆弱性です。対象はWindows 10 Version 1607・1809・21H2・22H2、Windows 11 Version 23H2・24H2で、各版の修正版を適用してください。

AI summary

Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.

Affected packages

Ecosystem	Package	Affected → Fixed	Fixed
Microsoft	MicrosoftWindows 10 Version 1607	≥ 10.0.14393.0, < 10.0.14393.9688→ 10.0.14393.9688	10.0.14393.9688
Microsoft	MicrosoftWindows 10 Version 1809	≥ 10.0.17763.0, < 10.0.17763.9487→ 10.0.17763.9487	10.0.17763.9487
Microsoft	MicrosoftWindows 10 Version 21H2	≥ 10.0.19044.0, < 10.0.19044.7846→ 10.0.19044.7846	10.0.19044.7846
Microsoft	MicrosoftWindows 10 Version 22H2	≥ 10.0.19045.0, < 10.0.19045.7846→ 10.0.19045.7846	10.0.19045.7846
Microsoft	MicrosoftWindows 11 Version 23H2	≥ 10.0.22631.0, < 10.0.22631.7711→ 10.0.22631.7711	10.0.22631.7711
Microsoft	MicrosoftWindows 11 Version 24H2	≥ 10.0.26100.0, < 10.0.26100.9974→ 10.0.26100.9974	10.0.26100.9974
Microsoft	MicrosoftWindows 11 Version 25H2	≥ 10.0.26200.0, < 10.0.26200.9974→ 10.0.26200.9974	10.0.26200.9974
Microsoft	MicrosoftWindows 11 version 26H1	≥ 10.0.28000.0, < 10.0.28000.3501→ 10.0.28000.3501	10.0.28000.3501
Microsoft	MicrosoftWindows 11 Version 26H2	≥ 10.0.26300.0, < 10.0.26300.9974→ 10.0.26300.9974	10.0.26300.9974
Microsoft	MicrosoftWindows Server 2016	≥ 10.0.14393.0, < 10.0.14393.9688→ 10.0.14393.9688	10.0.14393.9688
Microsoft	MicrosoftWindows Server 2016 (Server Core installation)	≥ 10.0.14393.0, < 10.0.14393.9688→ 10.0.14393.9688	10.0.14393.9688
Microsoft	MicrosoftWindows Server 2019	≥ 10.0.17763.0, < 10.0.17763.9487→ 10.0.17763.9487	10.0.17763.9487
Microsoft	MicrosoftWindows Server 2019 (Server Core installation)	≥ 10.0.17763.0, < 10.0.17763.9487→ 10.0.17763.9487	10.0.17763.9487
Microsoft	MicrosoftWindows Server 2022	≥ 10.0.20348.0, < 10.0.20348.5870→ 10.0.20348.5870	10.0.20348.5870
Microsoft	MicrosoftWindows Server 2025	≥ 10.0.26100.0, < 10.0.26100.33822→ 10.0.26100.33822	10.0.26100.33822
Microsoft	MicrosoftWindows Server 2025 (Server Core installation)	≥ 10.0.26100.0, < 10.0.26100.33822→ 10.0.26100.33822	10.0.26100.33822

Original description The description as published by the source.

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.
A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
The security update addresses the vulnerability by correcting the input sanitization error to preclude unintended elevation.

Source: Microsoft Security Response Center Blog NVD GitHub Advisory

Summary

AI summary

Affected packages

References