CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-12-15
Microsoft Windows AppX Installer Spoofing and Remote Code Execution Vulnerability (CVE-2021-43890) Analysis & Mitigation Guide
[Affected Scope] Systems running Microsoft Windows with App Installer (AppX/MSIX) and the ms-appinstaller URI scheme enabled
[Impact] Successful exploitation allows threat actors to deliver malware families such as Emotet, Trickbot, and Bazaloader via phishing, leading to complete system compromise.
[Mitigation] Apply the latest official Windows App Installer updates and disable the ms-appinstaller protocol handler via Group Policy.