Microsoft Windows Installer Privilege Escalation Vulnerability

A vulnerability in Windows Installer has been identified, allowing an authorized attacker to elevate privileges locally. This issue arises from improper input validation, which could be exploited to gain higher-level access.

Impact

Exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, which is included in the December 2025 Monthly Rollup, available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5071503, KB5071505, KB5071501, KB5071506, KB5071543, KB5072033, KB5072014, KB5071542, KB5071417, KB5071546, KB5071544, and KB5071413.