Microsoft App Installer vulnerabilities

3 published CVEs name Microsoft App Installer among the affected products; CISA lists 1 of them as exploited in the wild.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 1
Critical: 0
Known exploited: 1

Critical 0High 3Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

20211
20241
20261

Known exploitedNewest addition to KEV first

CVE-2021-43890
Windows AppX Installer Spoofing Vulnerability
Microsoft · App Installer
ExploitedHigh7.1

Newest CVEs

CVE-2026-68821
Windows Package Manager Elevation of Privilege Vulnerability
Microsoft · App Installer
High7.3
CVE-2024-38177
Windows App Installer Spoofing Vulnerability
Microsoft · App Installer
High7.8
CVE-2021-43890
Windows AppX Installer Spoofing Vulnerability
Microsoft · App Installer
ExploitedHigh7.1

Most common weaknesses