CVSS 7.8 (high) ยท published 2026-11-10
Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally.
Weakness: CWE-822, CWE-843
Source: NVD CVE-2026-96028
Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.