First published: Wed Jul 14 2021(Updated: )
Windows Installer Spoofing Vulnerability
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Windows 10 | ||
Windows 10 | =20h2 | |
Windows 10 | =21h1 | |
Windows 10 | =1607 | |
Windows 10 | =1809 | |
Windows 10 | =1909 | |
Windows 10 | =2004 | |
Microsoft Windows 7 | =sp1 | |
Microsoft Windows | ||
Microsoft Windows RT | ||
Microsoft Windows Server | =sp1 | |
Microsoft Windows Server | =sp2 | |
Microsoft Windows Server | ||
Microsoft Windows Server | =r2 | |
Microsoft Windows Server 2016 | ||
Microsoft Windows Server 2016 | =20h2 | |
Microsoft Windows Server 2016 | =2004 | |
Microsoft Windows Server 2019 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2021-33765 is rated as Important by Microsoft.
Yes, disabling the Windows Installer service can mitigate the risk of CVE-2021-33765 until a patch is applied.
To fix CVE-2021-33765, apply the security update released by Microsoft for the affected Windows versions.
CVE-2021-33765 affects multiple versions of Windows, including Windows 7, Windows 10, Windows Server 2008, and later versions.
Yes, exploiting CVE-2021-33765 can allow an attacker to execute code with elevated privileges, leading to unauthorized access.