CVE-2021-26869: Windows ActiveX Installer Service Information Disclosure Vulnerability
Windows ActiveX Installer Service Information Disclosure Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.19968Patch KB5000853 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.24566Patch KB5000851 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.23298Patch KB5000840 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.19968Patch KB5000848 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.4283Patch KB5000803 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.10240.18874Patch KB5000807 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19043.867Patch KB5000802 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.18363.1440Patch KB5000808 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.1817Patch KB5000822 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17134.2087Patch KB5000809
Event History
Frequently Asked Questions
What is CVE-2021-26869?
CVE-2021-26869 is a vulnerability in the Windows ActiveX Installer Service that allows for information disclosure.
Which software is affected by CVE-2021-26869?
CVE-2021-26869 affects Microsoft Windows 10, Windows 7, Windows 8.1, Windows RT 8.1, and various versions of Windows Server.
What is the severity of CVE-2021-26869?
CVE-2021-26869 has a severity rating of 5.5, which is considered medium.
How does CVE-2021-26869 allow for information disclosure?
CVE-2021-26869 allows an attacker to view sensitive information on a vulnerable system.
Is there a fix available for CVE-2021-26869?
Yes, Microsoft has released a security update to address CVE-2021-26869. It is recommended to apply the update as soon as possible.