CVE-2021-28437: Windows Installer Information Disclosure Vulnerability
Published Apr 13, 2021
·Updated
Windows Installer Information Disclosure Vulnerability
Affected Software
19 affected components
Microsoft Windows 10
Microsoft Windows 10=20h2
Microsoft Windows 10=1607
Microsoft Windows 10=1803
Microsoft Windows 10=1809
Microsoft Windows 10=1909
Microsoft Windows 10=2004
Microsoft Windows 7=sp1
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2016=20h2
Microsoft Windows Server 2016=1909
Microsoft Windows Server 2016=2004
Microsoft Windows Server 2019
Remediation
Event History
Apr 13, 2021
CVE Published
07:33 PM
Data Sourced
07:33 PM
DescriptionSeverity
Data Sourced
via NVD·08:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-28437?
The severity of CVE-2021-28437 is rated as important, indicating a significant risk to affected systems.
2
How do I fix CVE-2021-28437?
To fix CVE-2021-28437, apply the latest security updates provided by Microsoft for the affected versions of Windows.
3
Which Windows versions are affected by CVE-2021-28437?
CVE-2021-28437 affects multiple versions of Windows including Windows 7, 8.1, 10, and various Windows Server editions.
4
What type of vulnerability is CVE-2021-28437?
CVE-2021-28437 is classified as an information disclosure vulnerability in the Windows Installer.
5
Can exploitation of CVE-2021-28437 lead to data breaches?
Yes, exploitation of CVE-2021-28437 can potentially lead to unauthorized access to sensitive information, resulting in data breaches.