Microsoft Windows App Store elevation of privilege (CVE-2026-119987)

A proof-of-concept (PoC) exploit for CVE-2026-119987 was published on Sploitus on 2026-11-11. The vulnerability affects the Windows App Store and is classified as an Elevation of Privilege flaw with a CVSS 3.1 score of 7.8. The vulnerability allows a low-privileged local user to impact confidentiality, integrity, and availability on the target system.

Impact

Successful exploitation allows a local attacker to gain elevated privileges on an affected system. The CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) confirms that no user interaction is required, but the attacker must already possess local, low-level access to the machine.

Recommendation

• Inventory all systems running the Windows App Store and verify that they are up to date with the latest security patches from Microsoft.
• Prioritize the deployment of patches addressing CVE-2026-119987 across the fleet, starting with multi-user workstations and shared environments.
• Monitor local system logs for unexpected execution of Windows App Store binaries or suspicious process parent-child relationships initiated by non-administrative users.