CVE-2026-50343

Name of the Vulnerable Software and Affected Versions Microsoft Install Service (affected versions not specified)

Description Improper privilege management in the Microsoft Install Service allows an authorized attacker to elevate privileges locally, potentially granting full system control. The issue involves a dangling CrossDevice COM registration where a missing DLL and a writable %ProgramData% directory allow the loading of code via custom COM marshaling into a privileged COM server that fails to disable custom marshaling. COM (Component Object Model) is a platform-independent, distributed object-oriented system for creating binary software components.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.