CVE-2026-108468

LOWCVSS 7.0 · HIGH

Immediate actions

Recommended action window: Monitor and triage in normal cycle

NVD description

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

0.0/ 10 priority

Other references

Weakness type (CWE)

CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Full discourse1 post

Upwind Security MDR@UpwindMDR15h
🚨High - Windows Installer Use-After-Free Local Privilege Escalation (CVE-2026-108468) A use-after-free in Windows Installer (msiexec.exe / MSI service) can be triggered by an authenticated local user via crafted MSI install/uninstall transactions, leading to heap corruption and code execution in the installer service context (SYSTEM). Remote/unprivileged attackers are not impacted. 👉Affected: Microsoft Windows (Windows Installer)
0000028
360 followersView on X