PT-2022-11422 · Microsoft · Windows Installer

Ronnie Salomonsen

·

CVE-2021-41526

·

Published

2022-05-06

·

Updated

2024-04-19

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Windows Installer (MSI) built with InstallScript custom action (affected versions not specified)
Description A vulnerability has been reported in the Windows Installer (MSI) built with InstallScript custom action, which may allow privilege escalation when the 'repair' of the MSI is invoked.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2021-41526

Affected Products

Windows Installer