CVE-2025-50173

High

Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.

secure@microsoft.com·CWE-1390·Published 2025-08-12

CVSS

7.8

EPSS

0.00

KEV

Exploits

cve.orgen

101 chars

Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.

NVDen

101 chars

Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.

NVDes

108 chars

La autenticación débil en Windows Installer permite que un atacante autorizado eleve privilegios localmente.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.8	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
3.1	Secondary	NVD	7.8	1.8	5.9