Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.
Security updates
1.0.2507.21006 — https://learn.microsoft.com/en-us/azure/virtual-desktop/whats-new-multimedia-redirection
10.0.17763.7678 — https://support.microsoft.com/help/5063877
10.0.20348.4052 — https://support.microsoft.com/help/5063880
10.0.20348.3989 — https://support.microsoft.com/help/5063812
10.0.19044.6216 — https://support.microsoft.com/help/5063709
10.0.22621.5768 — https://support.microsoft.com/help/5063875
10.0.26100.4946 — https://support.microsoft.com/help/5063878
10.0.26100.4851 — https://support.microsoft.com/help/5064010
10.0.25398.1791 — https://support.microsoft.com/help/5063899
10.0.10240.21100 — https://support.microsoft.com/help/5063889
10.0.14393.8330 — https://support.microsoft.com/help/5063871
6.0.6003.23471 — https://support.microsoft.com/help/5063888
6.0.6003.23471 — https://support.microsoft.com/help/5063948
6.1.7601.27872 — https://support.microsoft.com/help/5063947
6.1.7601.27872 — https://support.microsoft.com/help/5063927
6.2.9200.25622 — https://support.microsoft.com/help/5063906
6.3.9600.22725 — https://support.microsoft.com/help/5063950
Vulnerabilities 1
-
High 7.8
Windows Installer Elevation of Privilege Vulnerability
Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.
Revision history
-
#2
In the Security Update table, added Multimedia Redirection Installer as it is also affected by this vulnerability. Microsoft recommends that customers using Multimedia Redirection Installer install the update to be fully protected from the vulnerability.
-
#1
Information published.
References
-
CVE-2025-50173 Windows Installer Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50173
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss