Microsoft Windows Installer Privilege Escalation Vulnerability

Critical Threat Advisory: This vulnerability is documented in active Ransomware campaigns. Immediate remediation required.

Technical Severity

MEDIUM

5.5 / 10

Minimal Risk Critical

Vector Specification

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Exploitation Likelihood

1.13 %

Predictive Probability

Percentile Rank

78.0 th

Documented as more likely to be exploited than 78.0% of known CVEs.

Detection Date

Mar 03, 2022

Remediation Due

Mar 17, 2022

CISA Catalog Active

Threat Analysis

Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.

Apply updates per vendor instructions.

Vendor Identity

Microsoft

Affected Product

Windows

Ransomware Status

Campaign Use Known

Weakness Classification

CWE-1386

National Vulnerability Database

https://nvd.nist.gov/vuln/detail/CVE-2021-41379