---
id: "CVE-2026-96029"
page: "https://infrastack.ai/live/CVE-2026-96029"
kind: "vulnerability"
aliases: ["CVE-2026-96029"]
title: "Windows Installer: flawed access control lets a local user gain higher privileges"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows Installer", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["infrastructure", "local-privilege-escalation", "windows", "windows-installer"]
not_affected_if: ["no-local-users"]
published_at: "2026-11-10T19:21:59+00:00"
first_seen_at: "2026-11-10T19:25:27+00:00"
updated_at: "2026-11-10T20:04:25+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96029", "first_seen_at": "2026-11-10T19:25:27+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-10T20:04:25+00:00"}]
exploit_sources: []
---

# Windows Installer: flawed access control lets a local user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-96029 (this .md is for agents)

Windows Installer has an access control flaw that lets an authorized local user raise their privileges. An attacker who already has a login on the machine can gain administrator-level control.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Windows Installer affected range not listed fixed no fixed version listed

## How to check

Unknown until Microsoft's Update Guide entry lists builds and KBs. Check the installed Windows cumulative update against the KB for your build once it is listed, e.g. with Get-HotFix.

## Timeline

- 2026-11-10T19:25:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-96029
- 2026-11-10T20:04:25+00:00 analyst — MSRC page for this CVE returned no content (JS-only), NVD page empty, search found nothing specific. Affected builds, KB and fix unknown; nothing verified. Settle by reading the MSRC Update Guide entry in a browser or the November 2026 Patch Tuesday list.

## From the sources

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_