CVE Catalog
Actively exploited in the wild
Microsoft Windows Installer Privilege Escalation Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2022-03-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-41379
MediumCVSS 5.5KEVExploitation Probability (EPSS)
Very high risk20.10%
97th percentile - higher than 97% of all known CVEs
Summary
Windows Installer Elevation of Privilege Vulnerability. Details are not provided in the description, but it allows privilege escalation.
Risk Assessment
An attacker could exploit this flaw to elevate privileges, potentially leading to full system compromise.
Recommendation
It is recommended to immediately apply patches released by Microsoft for Windows.
Original NVD description (English source)
Windows Installer Elevation of Privilege Vulnerability