Lucene search

CVE-2021-43890

🗓️ 15 Dec 2021 00:00:00Reported by AttackerKBType

Vulnerability in Microsoft Windows AppX installer allows for spoofing attacks using crafted packages to exploit the Emotet/Trickbot/Bazaloader malware. Mitigations and workaround recommendations provided

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 24
The Hacker News	Microsoft Temporarily Disables MSIX App Installers to Prevent Malware Abuse	8 Feb 202203:37	–	thn
The Hacker News	Microsoft Disables MSIX App Installer Protocol Widely Used in Malware Attacks	29 Dec 202305:16	–	thn
The Hacker News	Microsoft Issues Windows Update to Patch 0-Day Used to Spread Emotet Malware	15 Dec 202107:14	–	thn
Vulnrichment	CVE-2021-43890 Windows AppX Installer Spoofing Vulnerability	15 Dec 202114:15	–	vulnrichment
CVE	CVE-2021-43890	15 Dec 202115:15	–	cve
Microsoft CVE	Windows AppX Installer Spoofing Vulnerability	14 Dec 202108:00	–	mscve
Prion	Spoofing	15 Dec 202115:15	–	prion
Hive Pro Threat Advisories	Microsoft released patch for actively exploited spoofing vulnerability	16 Dec 202111:12	–	hivepro
Circl	CVE-2021-43890	14 Jun 202321:10	–	circl
Tenable Nessus	Microsoft App Installer Security Updates (December 2021)	18 Mar 202200:00	–	nessus

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43890
bleepingcomputer	www.bleepingcomputer.com/news/microsoft/microsoft-disables-msix-protocol-handler-abused-in-malware-attacks/
thehackernews	www.thehackernews.com/2023/12/microsoft-disables-msix-app-installer.html
microsoft	www.microsoft.com/en-us/security/blog/2023/12/28/financially-motivated-threat-actors-misusing-app-installer/
github	www.github.com/ChrisTitusTech/winutil/pull/26

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Dec 2021 00:00Current

7High risk

Vulners AI Score7

CVSS26

CVSS37.1

EPSS0.14934