CVE-2021-26413: Windows Installer Spoofing Vulnerability
Published Apr 13, 2021
·Updated
Windows Installer Spoofing Vulnerability
Affected Software
19 affected components
Microsoft Windows 10
Microsoft Windows 10=20h2
Microsoft Windows 10=1607
Microsoft Windows 10=1803
Microsoft Windows 10=1809
Microsoft Windows 10=1909
Microsoft Windows 10=2004
Microsoft Windows 7=sp1
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2016=20h2
Microsoft Windows Server 2016=1909
Microsoft Windows Server 2016=2004
Microsoft Windows Server 2019
Remediation
Event History
Apr 13, 2021
CVE Published
07:32 PM
Data Sourced
07:32 PM
DescriptionSeverity
Data Sourced
via NVD·08:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-26413?
CVE-2021-26413 is rated as important severity by Microsoft.
2
How do I fix CVE-2021-26413?
To fix CVE-2021-26413, ensure that you install the latest security updates provided by Microsoft for your affected Windows version.
3
Which software versions are vulnerable to CVE-2021-26413?
CVE-2021-26413 affects various versions of Windows 10, Windows 7, Windows 8.1, and several Windows Server editions.
4
Is CVE-2021-26413 a remote code execution vulnerability?
No, CVE-2021-26413 is a spoofing vulnerability that might allow an attacker to mislead a user into executing untrusted content.
5
What should I do if I suspect exploitation of CVE-2021-26413?
If you suspect exploitation of CVE-2021-26413, immediately apply the recommended security patches and monitor for suspicious activity.