Skip to content

CVE record · 2 sources

CVE-2026-116714

CVSS 7.8

Incorrect authorization in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

Vendor: Microsoft
Product: Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 23H2, Windows 11 Version 23H2
CVSS v3.1: 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-863
Exposure class: Operating system

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

62

Tenable research Tenable 4h ago

Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)

63 Critical 1029 Important 1 Moderate 0 Low Microsoft addresses 1093 CVEs in the eleventh Patch Tuesday of 2026. Microsoft patched 1093 CVEs in its November 2026 Patch Tuesday release, with 63 rated critical, 1029 rated as…

Exploited CVSS 6.5 Fix available CVE-2026-124194 CVE-2026-118146 CVE-2026-120002+17 more Microsoft
39

CVE NVD 4h ago

Incorrect authorization in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

Incorrect authorization in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-116714 Microsoft