CVE-2026-23656
Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network.
Published Mar 10, 2026 · updated Jun 17, 2026 · microsoft windows app
Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 10, 2026 · NIST NVD
Detected
Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network.
Jun 17, 2026 · NIST NVD
Updated
Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network.
Affected
- cpe microsoft/windows appversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-23656
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-23656
Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network.
nvd.nist.gov