EXPOSURES › CVE-2021-41379
CVE-2021-41379
CRITICAL ⌖ ON CISA KEV · EXPLOITEDA Windows Installer vulnerability allowed privilege escalation and was actively exploited in ransomware attacks, impacting DIB organizations reliant on Windows systems.
CVE-2021-41379 represents a privilege escalation vulnerability within the Windows Installer, actively exploited and linked to ransomware campaigns. DIB organizations using Windows must immediately patch to prevent unauthorized access and potential data compromise, directly impacting CMMC/NIST 800-171 compliance. Verify patching status and consider compensating controls until remediation is confirmed.
Shame score — The exploitation of a privilege escalation vulnerability in a core Windows component, linked to ransomware, demonstrates a significant security oversight with widespread impact.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |