High · published September 10, 2024
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 93.5th percentile for exploit probability.
⚡ A simple Windows Installer could give an attacker the keys to your kingdom! This elevation of privilege vulnerability lets them run their own code with SYSTEM level access. 🔥 Think of this vulnerability like a hotel with a master key. If someone finds that key, they can unlock any room without a reservation, gaining access to sensitive information and assets that should remain secure. An attacker could exploit this flaw to gain complete control over the system, allowing them to install malicious software, access sensitive data, or even disrupt critical services. The consequences could be absolutely devastating for users and organizations alike, leading to data breaches or system failures.
Think of this vulnerability like a hotel with a master key. If someone finds that key, they can unlock any room without a reservation, gaining access to sensitive information and assets that should remain secure. This Windows Installer Elevation of Privilege Vulnerability allows attackers to execute arbitrary code with elevated privileges, effectively bypassing standard security measures and gaining full control over the affected system.
An attacker could exploit this flaw to gain complete control over the system, allowing them to install malicious software, access sensitive data, or even disrupt critical services. The consequences could be absolutely devastating for users and organizations alike, leading to data breaches or system failures. Update Windows to the latest version immediately to patch this vulnerability. Additionally, review and adjust user permissions to minimize the risk of unauthorized installations. Regularly monitor your systems for any suspicious activities. You've got this! Stay vigilant and follow these steps to secure your systems. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1607 | < 10.0.14393.7336 | 10.0.14393.7336 |
| microsoft/windows_10_1507 | < 10.0.10240.20766 | 10.0.10240.20766 |
| microsoft/windows_10_1507 | < 10.0.10240.20766 | 10.0.10240.20766 |
| microsoft/windows_10_1607 | < 10.0.14393.7336 | 10.0.14393.7336 |
| microsoft/windows_10_1809 | < 10.0.17763.6293 | 10.0.17763.6293 |
| microsoft/windows_10_21h2 | < 10.0.19044.4894 | 10.0.19044.4894 |
| microsoft/windows_10_22h2 | < 10.0.19045.4894 | 10.0.19045.4894 |
| microsoft/windows_11_21h2 | < 10.0.22000.3197 | 10.0.22000.3197 |
| microsoft/windows_11_22h2 | < 10.0.22621.4169 | 10.0.22621.4169 |
| microsoft/windows_11_23h2 | < 10.0.22631.4169 | 10.0.22631.4169 |
| microsoft/windows_11_24h2 | < 10.0.26100.1742 | 10.0.26100.1742 |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.7336 | 10.0.14393.7336 |
| microsoft/windows_server_2019 | < 10.0.17763.6293 | 10.0.17763.6293 |
| microsoft/windows_server_2022 | < 10.0.20348.2700 | 10.0.20348.2700 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.1128 | 10.0.25398.1128 |