Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-73132)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation-of-privilege vulnerability exists in Microsoft Windows and Windows Server, which stems from a problem with the way Windows Installer handles certain file system operations and could be exploited to run arbitrary code with elevated privileges to install programs, view, change, or delete data, or create new accounts with full user privileges. The vulnerability is caused by a problem with the way Windows Installer handles certain file system operations.