MICROSOFT-CVE-2026-42900

HIGH8.1

Microsoft Windows App Store Elevation of Privilege Vulnerability

Published Jul 31, 2026

Modified 2 weeks ago

Details

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows an unauthorized attacker to elevate privileges over a network.

References

ADVISORY

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42900

CVSS Analysis

CVSS v2.0

8.1

Upstream

CVE-2026-42900

Ecosystems

Timeline

PublishedJul 31, 2026

ModifiedJul 31, 2026