MicrosoftCVE-2026-83676

Microsoft Windows Installer: integer overflow

CVE-2026-83676 · Published Oct 13, 2026 · updated Oct 29, 2026

High7.0

Fix: upgrade to 10.0.19044.7807 or later (9 fixed versions below)

Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.

Affected versions

Package	Affected	Fixed in
Windows 10 Version 21H2 Product	>= 10.0.19044.0, < 10.0.19044.7807	10.0.19044.7807
Windows 10 Version 22H2 Product	>= 10.0.19045.0, < 10.0.19045.7807	10.0.19045.7807
Windows 11 Version 23H2 Product	>= 10.0.22631.0, < 10.0.22631.7652	10.0.22631.7652
Windows 11 Version 24H2 Product	>= 10.0.26100.0, < 10.0.26100.9711	10.0.26100.9711
Windows 11 Version 25H2 Product	>= 10.0.26200.0, < 10.0.26200.9711	10.0.26200.9711
Windows 11 Version 26H2 Product	>= 10.0.26300.0, < 10.0.26300.9711	10.0.26300.9711
Windows 11 version 23H2 Product	>= 10.0.22631.0, < 10.0.22631.7652	10.0.22631.7652
Windows 11 version 26H1 Product	>= 10.0.28000.0, < 10.0.28000.3231	10.0.28000.3231
Windows Server 2022 Product	>= 10.0.20348.0, < 10.0.20348.5761	10.0.20348.5761
Windows Server 2025 Product	>= 10.0.26100.0, < 10.0.26100.33650	10.0.26100.33650
Windows Server 2025 (Server Core installation) Product	>= 10.0.26100.0, < 10.0.26100.33650	10.0.26100.33650

Details and references