PT-2025-50193 · Microsoft · Windows Installer+1

Published 2025-12-09 · Updated 2025-12-10 · CVE-2025-62571

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Installer (affected versions not specified)

Description A flaw in input validation within Windows Installer can allow an attacker with local access to gain elevated privileges. This issue allows for privilege escalation on the affected system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-15515

CVE-2025-62571

Affected Products

Windows

Windows Installer

References · 7

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62571 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-62571 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15515 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-62571 · Security Note
• https://osv.dev/vulnerability/CVE-2025-62571 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-62571 · Security Note
• https://twitter.com/CVEnew/status/1998781367853662292 · Twitter Post