CVE-2021-43890CISA KEVEPSS p95.6%

CVE-2021-43890Microsoft Windows AppX Installer Spoofing Vulnerability

Microsoft / Windows

Description

Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability.

Scoring

CVSS 7.1 ()
VectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS10.29% probability of exploitation · percentile 95.6% · 2026-10-05T12:00:23Z
Last modified2026-08-06

CISA KEV entry

Added to KEV: 2021-12-15

(incoming)1

TypeTargetConfidenceTier
KEVEntryMicrosoft Windows AppX Installer Spoofing Vulnerabilitykev-cve-2021-438900%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Microsoft Windows Spoofing Vulnerability
CVE
Microsoft Windows Installer Privilege Escalation Vulnerability
CVE
Microsoft Windows MSHTML Platform Spoofing Vulnerability
CVE
Microsoft Windows Installer Improper Privilege Management Vulnerability
CVE
Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability
CVE
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.