August Windows Updates May Hinder Application Installation

Red Dog Security

07 Sep 2025 — 2 min read

Microsoft has reported that the August 2025 Windows security updates may trigger unexpected User Account Control (UAC) prompts and cause issues with application installations. The bug affects users without administrator rights across all supported versions of Windows.

Root Cause: Security Fix in Windows Installer

The issue stems from a patch for a privilege escalation vulnerability in Windows Installer (CVE-2025-50173), which could allow authenticated attackers to obtain SYSTEM-level privileges.

To address this, Microsoft introduced stricter UAC prompts requiring administrator credentials in more scenarios to prevent exploitation. However, this change has introduced new complications.

Where Problems Occur

According to Microsoft, the UAC prompts may now appear when:

Running MSI repair commands (e.g., msiexec /fu)
Installing applications that configure themselves for individual users and invoke Windows Installer during Active Setup

As a result, standard users may be unable to:

Deploy packages via Configuration Manager (ConfigMgr) that rely on user-specific advertising configurations
Enable Secure Desktop
Run certain Autodesk applications, including some versions of AutoCAD, Civil 3D, and Inventor CAM

Affected Platforms

The list of impacted systems is extensive and covers both client and server versions:

Client: Windows 11 (24H2, 23H2, 22H2), Windows 10 (22H2, 21H2, 1809, Enterprise LTSC 2019, Enterprise LTSC 2016, 1607, Enterprise 2015 LTSB)
Server: Windows Server 2025, 2022, 1809, 2019, 2016, 2012 R2, 2012

Microsoft’s Statement

“The August 2025 Windows security update (KB5063878) and later updates included an enhancement to ensure that User Account Control (UAC) prompts for administrator credentials when performing a repair through Windows Installer (MSI) and related operations,” Microsoft explained.

“If a standard user runs an application that initiates an MSI repair operation without displaying a UI, it will fail with an error message. For example, installing and running Office Professional Plus 2010 as a standard user will fail with Error 1730 during the configuration process.”

Workarounds and Fix in Progress

Microsoft has confirmed that it is developing a resolution. Soon, administrators will be able to allow specific applications to perform MSI repair operations without triggering UAC prompts.

In the meantime, the company advises users to run applications that rely on Windows Installer with administrator privileges to avoid installation and repair failures.

Unpatched Vulnerability Found in TP-Link Routers

TP-Link has confirmed a previously unknown zero-day vulnerability affecting several of its router models. The company said it is investigating the issue and preparing security updates. Discovery and Technical Details The flaw was discovered by an independent researcher using the alias ByteRay, who first reported it to TP-Link on May

AI Ransomware PromptLock Turns Out to Be a Research Project

What first appeared to be the world’s first case of AI-powered ransomware has turned out to be something else entirely: a university research project. From Discovery to Revelation Last month, security experts at ESET reported finding samples of malware called PromptLock on VirusTotal. They described it as the first

Law Enforcement Shuts Down Pirate Streaming Network Streameast

Egyptian authorities, working with the Alliance for Creativity and Entertainment (ACE), announced they have dismantled Streameast—described as the world’s largest illegal sports streaming network. Two alleged operators have been arrested. A Giant in Pirate Streaming Founded in 2018, Streameast offered free, ad-supported access to HD content from licensed

Apple Invites Researchers to Test iPhone Security

Apple has opened applications for its 2026 Security Research Device Program (SRDP), giving white-hat experts the chance to receive a specially configured iPhone for cybersecurity research. Applications are open until October 31, 2025. What the Program Offers Launched in 2020, SRDP provides researchers with “hackable” iPhones designed to make iOS