Windows Installer Uninstaller Vulnerability in a Major Software Suite

CVE-2021-22038

What is CVE-2021-22038?

A security vulnerability exists in the uninstaller of Windows installers which improperly manages temporary file execution. When the uninstaller is activated, it duplicates itself to a predictable temporary directory that is not only accessible to non-Administrator users but also lacks sufficient protections. This design flaw allows an attacker to replace the uninstaller's binary with a malicious payload prior to execution, which could lead to unauthorized access and escalated privileges if the original uninstaller operates with Administrator rights. The vulnerability specifically impacts installers built on Windows systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References