CVE coverage
View on NVD →
CVE-2021-41379
CVSS 5.5
Actively exploited (KEV)
5 detections found
Windows Installer Elevation of Privilege Vulnerability
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Potential Privilege Escalation via InstallerFileTakeOver | production | 2026-09-18 |
| splunk | MSI Module Loaded by Non-System Binary | production | 2026-05-13 |
| sigma | Potential CVE-2021-41379 Exploitation Attempt | test | 2024-12-01 |
| sigma | InstallerFileTakeOver LPE CVE-2021-41379 File Create Event | test | 2022-12-25 |
| sigma | LPE InstallerFileTakeOver PoC CVE-2021-41379 | test | 2022-07-12 |