PT-2021-5019 · Microsoft · Windows Installer+1

Published 2021-11-23 · Updated 2025-05-29 · CVE-2021-43883

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Installer versions prior to the fixed version

Description The issue is caused by insufficient handling of group policy access. Exploitation of this issue may allow an attacker to elevate their privileges by running a specially crafted executable file. An elevation-of-privilege vulnerability allows attackers to affect the system.

Recommendations For versions prior to the fixed version, update to the latest version to resolve the issue. As a temporary workaround, consider restricting access to the Windows Installer to minimize the risk of exploitation.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2021-05786

CVE-2021-43883

Affected Products

Windows

Windows Installer

References · 15

• 🔥 https://github.com/jbaines-r7/shakeitoff · Exploit
• https://osv.dev/vulnerability/CVE-2021-43883 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43883 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2021-43883 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-43883 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05786 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43883 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-43883 · Security Note
• https://t.me/w2hack/1858 · Telegram Post
• ❌ https://github.com/klinix5/InstallerFileTakeOver/tree/644a05c54ef68afb4fd20893fb7149c7f642aeb7 · Note, Deleted
• https://twitter.com/arpsyndicate/status/1928016882688266575 · Twitter Post
• https://t.me/my_cyde/182 · Telegram Post
• https://t.me/true_secator/2447 · Telegram Post
• https://t.me/cibsecurity/34030 · Telegram Post
• https://habr.com/ru/news/t/591115 · Note