Netskope Threat Labs

OS-WINDOWS Microsoft Windows Installer privilege escalation attempt

IPS-SWG

2 SIDs: 58635, 59968

Stats

First seen
July 2024
Last seen
February 2025

Description

Detects an attempt to exploit CVE-2021-41379, CVE-2021-43883, and CVE-2022-30147, a privilege escalation flaw that can grant higher access in Microsoft Windows Installer.

CVEs

CVE-2021-41379CVE-2021-43883CVE-2022-30147

Related malware families

CVE-2021-41379Microsoft

References