CVE-2021-41379
is CVE-2021-41379real, exploitable, or a false positive? Here's the community ground truth.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Windows Installer Elevation of Privilege Vulnerability
NVD only has a brief summary for this one — the community fills in the real-world detail below.
References
Published
Embed this verdict
[](https://www.truepositive.app/cve/CVE-2021-41379)<a href="https://www.truepositive.app/cve/CVE-2021-41379"><img src="https://www.truepositive.app/cve/CVE-2021-41379/badge.svg" alt="TruePositive verdict for CVE-2021-41379"></a>Live badge — updates automatically as the community verdict changes.
Community ground truth
Community verdict
2 verdictsIncludes TruePositive's curated baseline from public sources — community verdicts accrue on top.
Pick your verdict — we'll save it right after a quick sign-in.
Practitioners rate this higher than its CVSS — treat with extra caution.
Field notes & remediation
Verdicts are the quick signal — notes are the evidence and fixes behind them.
- 0
Microsoft Windows Installer Privilege Escalation Vulnerability — Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation. Listed in the CISA KEV catalog (added 2022-03-03) — confirmed exploited in the wild, not theoretical. It is linked to known ransomware campaigns. FIRST EPSS puts the chance of exploitation in the next 30 days at ~20%. Treat it as real and prioritize remediation over triage.
- 0
Required action for Microsoft Windows: Apply updates per vendor instructions. CISA set a federal remediation due date of 2022-03-17. After patching, verify the vulnerable path is no longer reachable before closing the finding.
Related CVEs
Same weakness — CWE-59.
- CVE-2020-0787CVSS 7.8KEVEPSS 43%
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.
- CVE-2019-0841CVSS 7.8KEVEPSS 42%
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836.
- CVE-2019-1253CVSS 7.8KEVEPSS 12%
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1215, CVE-2019-1278, CVE-2019-1303.
- CVE-2024-57728CVSS 7.2KEVEPSS 8%
SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.
- CVE-2025-60710CVSS 7.8KEVEPSS 5%
Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.
- CVE-2026-41091CVSS 7.8KEVEPSS 1%
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.