CVE-2021-41379VulnerabilityPublished 03/03/2022Updated 10/24/2026

CVE-2021-41379: Microsoft Windows Installer Privilege Escalation Vulnerability

Affects Microsoft WindowsSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/03/2022
KEV deadline: 03/17/2022
Ransomware: Used in ransomware campaigns
EPSS: 19.5% chance of exploitation in 30 days – higher than 97% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2021-41379 (opens in a new tab)

Description

CVE-2021-41379 is a high-severity privilege escalation vulnerability in Microsoft Windows Installer. It allows an attacker to elevate privileges on affected Windows systems. The vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. Specific affected Windows versions are not detailed in the available information.

Summary

Microsoft Windows Installer contains an unspecified vulnerability (CVE-2021-41379) that enables privilege escalation. This vulnerability has been actively exploited in the wild, including use in ransomware attacks. No detailed technical description or affected version information is provided in the source data. The vulnerability is classified under CWE-1386, indicating an issue related to improper control of a resource through its lifetime.

Impact

Successful exploitation of this vulnerability allows an attacker to escalate privileges on a Windows system, potentially gaining elevated access rights. This can facilitate further malicious activities such as deploying ransomware or other malicious payloads. The vulnerability has been confirmed as exploited in the wild, increasing the risk to affected systems.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation details are provided, organizations should monitor Microsoft security advisories closely and apply any updates promptly once available.

Weaknesses

CWE-1386Unclassified weakness (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:41:29 UTC

Weaknesses

References

Related threats