Privilege escalation via heap overflow

Heap-based buffer overflow in Windows Installer in Microsoft Windows allows local users to gain elevated privileges on affected systems. Microsoft and NVD identify the flaw class as a heap-based buffer overflow in Windows Installer, but public records do not disclose the affected function, code path, or the operation that overruns heap memory. Exploitation requires local low-privileged code execution on a vulnerable Windows client or server build, and the published impact is bounded to elevation of privilege rather than a remote entry point.