winget security

Microsoft has published CVE-2026-68821, an elevation-of-privilege vulnerability in Windows Package Manager, but the advisory’s public record leaves administrators without the information normally needed to prove a machine is fixed: no affected WinGet or App Installer version range, no CVSS...