Windows Installerの脆弱性で、ローカルから権限を昇格される
Summary
Windows Installerの権限昇格の脆弱性で、ローカルで認証済みの攻撃者がシステム権限で任意のコードを実行できるおそれがあります。影響を受けるのはWindows 10の1607・1809・21H2・22H2とWindows 11の23H2・24H2です。各版の修正版が公開されているので、Windows Updateで最新の更新を適用してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
Windows Installerの権限昇格の脆弱性で、ローカルで認証済みの攻撃者がシステム権限で任意のコードを実行できるおそれがあります。影響を受けるのはWindows 10の1607・1809・21H2・22H2とWindows 11の23H2・24H2です。各版の修正版が公開されているので、Windows Updateで最新の更新を適用してください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| MicrosoftWindows 10 Version 1607 |
≥ 10.0.14393.0, < 10.0.14393.9612→ 10.0.14393.9612 |
10.0.14393.9612 |
| MicrosoftWindows 10 Version 1809 |
≥ 10.0.17763.0, < 10.0.17763.9376→ 10.0.17763.9376 |
10.0.17763.9376 |
| MicrosoftWindows 10 Version 21H2 |
≥ 10.0.19044.0, < 10.0.19044.7807→ 10.0.19044.7807 |
10.0.19044.7807 |
| MicrosoftWindows 10 Version 22H2 |
≥ 10.0.19045.0, < 10.0.19045.7807→ 10.0.19045.7807 |
10.0.19045.7807 |
| MicrosoftWindows 11 Version 23H2 |
≥ 10.0.22631.0, < 10.0.22631.7652→ 10.0.22631.7652 |
10.0.22631.7652 |
| MicrosoftWindows 11 Version 24H2 |
≥ 10.0.26100.0, < 10.0.26100.9711→ 10.0.26100.9711 |
10.0.26100.9711 |
| MicrosoftWindows 11 Version 25H2 |
≥ 10.0.26200.0, < 10.0.26200.9711→ 10.0.26200.9711 |
10.0.26200.9711 |
| MicrosoftWindows 11 version 26H1 |
≥ 10.0.28000.0, < 10.0.28000.3231→ 10.0.28000.3231 |
10.0.28000.3231 |
| MicrosoftWindows 11 Version 26H2 |
≥ 10.0.26300.0, < 10.0.26300.9711→ 10.0.26300.9711 |
10.0.26300.9711 |
| MicrosoftWindows Server 2012 |
≥ 6.2.9200.0, < 6.2.9200.26434→ 6.2.9200.26434 |
6.2.9200.26434 |
| MicrosoftWindows Server 2012 (Server Core installation) |
≥ 6.2.9200.0, < 6.2.9200.26434→ 6.2.9200.26434 |
6.2.9200.26434 |
| MicrosoftWindows Server 2012 R2 |
≥ 6.3.9600.0, < 6.3.9600.23470→ 6.3.9600.23470 |
6.3.9600.23470 |
| MicrosoftWindows Server 2012 R2 (Server Core installation) |
≥ 6.3.9600.0, < 6.3.9600.23470→ 6.3.9600.23470 |
6.3.9600.23470 |
| MicrosoftWindows Server 2016 |
≥ 10.0.14393.0, < 10.0.14393.9612→ 10.0.14393.9612 |
10.0.14393.9612 |
| MicrosoftWindows Server 2016 (Server Core installation) |
≥ 10.0.14393.0, < 10.0.14393.9612→ 10.0.14393.9612 |
10.0.14393.9612 |
| MicrosoftWindows Server 2019 |
≥ 10.0.17763.0, < 10.0.17763.9376→ 10.0.17763.9376 |
10.0.17763.9376 |
| MicrosoftWindows Server 2019 (Server Core installation) |
≥ 10.0.17763.0, < 10.0.17763.9376→ 10.0.17763.9376 |
10.0.17763.9376 |
| MicrosoftWindows Server 2022 |
≥ 10.0.20348.0, < 10.0.20348.5761→ 10.0.20348.5761 |
10.0.20348.5761 |
| MicrosoftWindows Server 2025 |
≥ 10.0.26100.0, < 10.0.26100.33650→ 10.0.26100.33650 |
10.0.26100.33650 |
| MicrosoftWindows Server 2025 (Server Core installation) |
≥ 10.0.26100.0, < 10.0.26100.33650→ 10.0.26100.33650 |
10.0.26100.33650 |
Original description The description as published by the source.
An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.
A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
The security update addresses the vulnerability by correcting the input sanitization error to preclude unintended elevation.
Source: Microsoft Security Response Center Blog NVD GitHub Advisory
References
- web secure@microsoft.com
- web nvd.nist.gov
- web github.com