Microsoft App Installer — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft App Installer, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-38177 — CVSS 7.8 (high): Windows App Installer Spoofing Vulnerability
• CVE-2021-43890 — CVSS 7.1 (high) — actively exploited: We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks…