Microsoft Windows Installer 权限许可和访问控制问题漏洞

CNNVD-ID编号	CNNVD-202104-732
CVE编号	CVE-2021-28440
发布时间	2021-04-13
更新时间	2021-04-15
漏洞类型	权限许可和访问控制问题
漏洞来源	N/A
危险等级	高危
威胁类型	本地
厂商	N/A

漏洞介绍

Microsoft Windows Installer是美国微软（Microsoft）公司的一个Win2K/WinXP/WinVista的组件。该组件是专门用来管理和配置软件服务的工具。 Microsoft Windows Installer 存在权限许可和访问控制问题漏洞。以下产品和版本受到影响：Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 for 32-bit Systems,Windows 10 Version 20H2 for ARM64-based Systems,Windows Server, version 20H2 (Server Core Installation),Windows 10 Version 1803 for 32-bit Systems,Windows 10 Version 1803 for x64-based Systems,Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based Systems,Windows Server 2019,Windows Server 2019 (Server Core installation),Windows 10 Version 1909 for 32-bit Systems,Windows 10 Version 1909 for x64-based Systems,Windows 10 Version 1909 for ARM64-based Systems,Windows Server, version 1909 (Server Core installation),Windows 10 Version 2004 for 32-bit Systems,Windows 10 Version 2004 for ARM64-based Systems,Windows 10 Version 2004 for x64-based Systems,Windows Server, version 2004 (Ser

漏洞补丁

目前厂商已发布升级了Microsoft Windows Installer 权限许可和访问控制问题漏洞的补丁，Microsoft Windows Installer 权限许可和访问控制问题漏洞的补丁获取链接： https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28440

参考网址

暂无

受影响实体

暂无

信息来源

http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-202104-732