CVE-2021-43890

Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability.

• https://github.com/ChrisTitusTech/winutil/pull/26Issue Tracking
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43890Patch
• https://thehackernews.com/2023/12/microsoft-disables-msix-app-installer.htmlPress/Media Coverage
• https://www.bleepingcomputer.com/news/microsoft/microsoft-disables-msix-protocol-handler-abused-in-malware-attacks/Press/Media Coverage
• https://www.microsoft.com/en-us/security/blog/2023/12/28/financially-motivated-threat-actors-misusing-app-installer/Exploit
• https://github.com/ChrisTitusTech/winutil/pull/26Issue Tracking
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43890Patch
• https://thehackernews.com/2023/12/microsoft-disables-msix-app-installer.htmlPress/Media Coverage
• https://www.bleepingcomputer.com/news/microsoft/microsoft-disables-msix-protocol-handler-abused-in-malware-attacks/Press/Media Coverage
• https://www.microsoft.com/en-us/security/blog/2023/12/28/financially-motivated-threat-actors-misusing-app-installer/Exploit
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-43890US Government Resource