CVE-2026-70347

A heap-based buffer overflow vulnerability in Windows Installer allows authorized attackers to elevate their privileges locally, potentially granting them unauthorized access to sensitive system resources. Organizations using affected Windows versions should prioritize patching this vulnerability to mitigate the risk of exploitation. This is particularly critical for environments where users have administrative privileges or where sensitive data is handled.