CVE-2024-21436
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 12, 2024
Updated: Dec 27, 2024
CWE ID 284
Summary
CVE-2024-21436 is a newly disclosed vulnerability affecting Windows Installer. This elevation of privilege issue allows an attacker to gain administrative control over a system by manipulating specially crafted installation packages. Successful exploitation could lead to the installation of unauthorized software, data theft, or further system compromise. It is recommended that users and administrators install the forthcoming Microsoft patch as soon as it becomes available to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.