EXPOSURES › CVE-2021-43890
CVE-2021-43890
CRITICAL ⌖ ON CISA KEV · EXPLOITEDA Microsoft Windows vulnerability allowed attackers to spoof installations, potentially delivering malware and compromising system integrity.
The AppX Installer spoofing vulnerability (CVE-2021-43890) enabled attackers to trick users into installing malicious applications disguised as legitimate software, leading to potential data loss and system compromise. DIB organizations using Windows must ensure timely patching and user awareness training to mitigate this risk, as it was actively exploited and linked to ransomware. Failure to patch exposes systems to significant risk.
Shame score — The vulnerability's exploitation in ransomware attacks and potential for widespread system compromise demonstrates a significant failure in Microsoft's security practices.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability.
"Microsoft has revealed that a long spanning data breach, affecting information dating as far back as 14 years, has exposed the data of 250 million users."
"Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability."
"A preliminary report from the National Transportation Safety Board suggests a close-to-home reason for the mishap."
"Hackers Steal Claude Login Sessions With Infostealer Malware to Hijack Accounts"
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |