CVE-2021-43890

🗓️ 15 Dec 2021 14:15:35Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 1174 Views

Windows AppX Installer Spoofing Vulnerability CVE-2021-4389

Reporter	Title	Published	Views	Family All 28
ATTACKERKB	CVE-2021-43890	15 Dec 202100:00	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday December 2021	16 Dec 202120:53	–	avleonov
Circl	CVE-2021-43890	15 Dec 202104:00	–	circl
CISA KEV Catalog	Microsoft Windows AppX Installer Spoofing Vulnerability	15 Dec 202100:00	–	cisa_kev
CISA	CISA Adds Two Known Exploited Vulnerabilities to Catalog	15 Dec 202100:00	–	cisa
CNNVD	Microsoft Windows AppX Installer 安全漏洞	14 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-43890 Windows AppX Installer Spoofing Vulnerability	15 Dec 202114:15	–	cvelist
Hive Pro Threat Advisories	Microsoft released patch for actively exploited spoofing vulnerability	16 Dec 202111:12	–	hivepro
Kaspersky	KLA12386 Multiple vulnerabilities in Microsoft Apps	14 Dec 202100:00	–	kaspersky
Krebs on Security	Microsoft Patch Tuesday, December 2021 Edition	14 Dec 202122:23	–	krebs

NVD

Vulners

Node

microsoft app_installerRange<1.16

AND

microsoft windows_10_1809Match-

microsoft windows_10_1903Match-

microsoft windows_10_1909Match-

microsoft windows_10_2004Match-

microsoft windows_10_20h2Match-

microsoft windows_10_21h1Match-

microsoft windows_10_21h2Match-

microsoft windows_11_21h2Match-

Node

microsoft app_installerRange<1.11

AND

microsoft windows_10_1507Match-

microsoft windows_10_1709Match-

microsoft windows_10_1803Match-

[
  {
    "vendor": "Microsoft",
    "product": "App Installer",
    "cpes": [
      "cpe:2.3:a:microsoft:app_installer:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "1.0.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
bleepingcomputer	www.bleepingcomputer.com/news/microsoft/microsoft-disables-msix-protocol-handler-abused-in-malware-attacks/
github	www.github.com/ChrisTitusTech/winutil/pull/26
microsoft	www.microsoft.com/en-us/security/blog/2023/12/28/financially-motivated-threat-actors-misusing-app-installer/
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43890
thehackernews	www.thehackernews.com/2023/12/microsoft-disables-msix-app-installer.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

25 Feb 2026 13:46Current

8.4High risk

Vulners AI Score8.4

CVSS 26

CVSS 3.17.1

EPSS0.25241

SSVC

In Wild