PT-2025-1103 · Microsoft · Windows App Package Installer+1

Published 2025-01-14 · Updated 2025-01-16 · CVE-2025-21275

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows App Package Installer (affected versions not specified)

Description The issue is related to weaknesses in the authorization procedure of the Windows App Package Installer, allowing an attacker to elevate their privileges. This can be exploited to gain elevated access to the system, potentially up to the SYSTEM level. The exploit can be triggered by having a specially crafted file viewed in Explorer or by spreading via email attachments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

BDU:2025-00358

CVE-2025-21275

Affected Products

Windows

Windows App Package Installer

References · 14

• https://osv.dev/vulnerability/CVE-2025-21275 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21275 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21275 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-21278 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00358 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21275 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-21275 · Vendor Advisory
• https://twitter.com/BustedSec/status/1879573284100219063 · Twitter Post
• https://t.me/echeloneyes/3545 · Telegram Post
• https://twitter.com/outpost24/status/1879489449643421864 · Twitter Post
• https://twitter.com/CVEnew/status/1879290777014030607 · Twitter Post
• https://reddit.com/r/Action1/comments/1i1d6m5/the_first_patch_tuesday_of_2025_is_here · Reddit Post
• https://t.me/true_secator/6620 · Telegram Post
• https://t.me/avleonovcom/1497 · Telegram Post