CVE-2026-69945: Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.
Other sources
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.7807Patch KB5126657 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33650Patch KB5126646 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9711Patch KB5127648 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9711Patch KB5127648 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26300.9711Patch KB5127648 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.3231Patch KB5127646 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.7652Patch KB5126653 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5761Patch KB5126655
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker must already be authorized on the affected Windows system and have local access. The provided information does not indicate that unauthenticated or remote attackers can exploit it directly.
What is the likely security impact after successful exploitation?
Successful exploitation allows local elevation of privilege and is rated as having high impact to confidentiality, integrity, and availability. The scope is changed, indicating the impact can extend beyond the initially authorized security context.
Which systems should be prioritized for triage?
Prioritize Microsoft Windows 10, Windows 11, Windows Server 2022, and Windows Server 2025 systems where untrusted or lower-privileged users can obtain local authorized access. The supplied data does not identify affected build numbers or whether any particular configuration is exempt.