CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-11-10
Microsoft Windows Installer Elevation of Privilege Vulnerability (CVE-2021-41379) Technical Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems, including Windows 7, 8.1, 10, 11, and Windows Server 2008, 2012, 2016, 2019, 2022
[Impact] A local authenticated attacker can exploit improper link resolution in the Windows Installer service to delete or manipulate arbitrary files with SYSTEM privileges, potentially leading to full local privilege escalation
[Mitigation] Apply the official cumulative security updates provided by Microsoft immediately, or restrict Windows Installer execution for non-administrative users as a temporary workaround