Microsoft Windows ActiveX 安装程序服务信息泄露漏洞

CNNVD-ID编号	CNNVD-202103-599	CVE编号	CVE-2021-26869
发布时间	2021-03-09	更新时间	2021-03-10
漏洞类型	信息泄露	漏洞来源	N/A
危险等级	中危	威胁类型	本地
厂商	N/A

漏洞介绍

Windows ActiveX 安装程序服务存在信息泄露漏洞。以下产品和版本受到影响：Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based Systems,Windows Server 2019,Windows Server 2019 (Server Core installation),Windows 10 Version 1909 for 32-bit Systems,Windows 10 Version 1909 for x64-based Systems,Windows 10 Version 1909 for ARM64-based Systems,Windows Server, version 1909 (Server Core installation),Windows 10 Version 2004 for 32-bit Systems,Windows 10 Version 2004 for ARM64-based Systems,Windows 10 Version 2004 for x64-based Systems,Windows Server, version 2004 (Server Core installation),Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 for 32-bit Systems,Windows 10 Version 20H2 for ARM64-based Systems,Windows Server, version 20H2 (Server Core Installation),Windows 10 for 32-bit Systems,Windows 10 for x64-based Systems,Windows 10 Version 1607 for 32-bit Systems,Windows 10 Version 1607 for x64-based Systems,Windows Server 2016,W

漏洞补丁

目前厂商已发布升级了Microsoft Windows ActiveX 安装程序服务信息泄露漏洞的补丁，Microsoft Windows ActiveX 安装程序服务信息泄露漏洞的补丁获取链接： https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26869