CVE-2021-43890

CVE-2021-43890 is a Windows AppX Installer spoofing vulnerability. An attacker could craft a malicious package to be opened by a user, leveraging the ms-appinstaller URI handler to spoof trusted UI and execute code at the user’s level after social engineering (phishing). Attacks have been associa...

CVE-2026-68821

The CVE-2026-68821 entry concerns Windows Package Manager with an issue in privilege management that allows an authorized local attacker to elevate privileges. Affected software is Windows Package Manager; the underlying cause is improper privilege handling, enabling local privilege escalation wi...

CVE-2024-38177

CVE-2024-38177: Windows App Installer Spoofing vulnerability. Multiple sources (PT-2024-6017; OpenVAS entry) indicate the flaw stems from lack of proper output encoding/escaping in Windows App Installer, enabling spoofing via specially crafted packages. The available connected documents do not sp...