CVE-2021-41379 — MEDIUM (5.5)

Q: What is CVE-2021-41379?

CVE-2021-41379 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Windows Installer Elevation of Privilege Vulnerability

Q: How severe is CVE-2021-41379?

CVE-2021-41379 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2021-41379?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows 10 1507, Microsoft Windows 10 1607, Microsoft Windows 10 1809, Microsoft Windows 10 1909, Microsoft Windows 10 2004.

Vulnerability Description

Windows Installer Elevation of Privilege Vulnerability

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Microsoft	Windows 10 1507	< 10.0.10240.19119
Microsoft	Windows 10 1607	< 10.0.14393.4770
Microsoft	Windows 10 1809	< 10.0.17763.2300
Microsoft	Windows 10 1909	< 10.0.18363.1916
Microsoft	Windows 10 2004	< 10.0.19041.1348
Microsoft	Windows 10 20H2	< 10.0.19042.1348
Microsoft	Windows 10 21H1	< 10.0.19043.1348
Microsoft	Windows 11 21H2	< 10.0.22000.318
Microsoft	Windows 7	-
Microsoft	Windows 8.1	-
Microsoft	Windows Rt 8.1	-
Microsoft	Windows Server 2004	< 10.0.19041.1348
Microsoft	Windows Server 2008	-
Microsoft	Windows Server 2012	-
Microsoft	Windows Server 2016	< 10.0.14393.4770
Microsoft	Windows Server 2019	< 10.0.17763.2300
Microsoft	Windows Server 2022	< 10.0.20348.350
Microsoft	Windows Server 20H2	< 10.0.19042.1348

Related Weaknesses (CWE)

CWE-59

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-4137PatchVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1308/Third Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-4137PatchVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1308/Third Party AdvisoryVDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-US Government Resource

FAQ

What is CVE-2021-41379?

CVE-2021-41379 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Windows Installer Elevation of Privilege Vulnerability

How severe is CVE-2021-41379?

CVE-2021-41379 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-41379?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows 10 1507, Microsoft Windows 10 1607, Microsoft Windows 10 1809, Microsoft Windows 10 1909, Microsoft Windows 10 2004.