The vulnerability bypasses a previous flaw ( CVE-2021-41379 ), which Microsoft believed it had successfully patched last month, and enables a hacker to elevate privileges allowing them to takeover a computer and spread their attacks across the victim’s network. 'Talos has already detected malware samples in the wild that are attempting to take advantage of this vulnerability,' confirmed Jaeson Schultz, Technical Leader of Cisco's Talos Security Intelligence & Research Group. Zero-day exploits are vulnerabilities which hackers have been able to attack before a fix is in place and are therefore the most critical kind of security flaw. As for Windows Insider program members, if you check for updates you should see the new build now.ġ1/24 Update: Just days after Microsoft rolled out a new Windows update to fix the problems with Microsoft Installer (MSI), a zero-day hack has now been revealed in Microsoft Windows Installer after it was publicly disclosed by security researcher Abdelhamid Naceri. MSI installers are widely used on Windows and some of the affected apps include security programs (such as Kaspersky), so it will be a priority for Microsoft. There is currently no timeline on the fix being rolled out to the stable channel but, given the acceleration of the bug fix here, I would expect a relatively short wait. Microsoft has also released a full list of the improvements in Windows 11 22000.348. “We fixed a known issue that might prevent apps, such as Kaspersky apps, from opening after you attempt to repair or update the apps using the Microsoft Installer (MSI),” states the Windows Insider Program Team. The company added the patch as an “additional fix” late into the new build. Windows 11 Build 22000.348 has been sent to beta and release preview channels. This was an urgent fix and Microsoft has acted quickly. 11/22 Update: Microsoft has confirmed that it has released a new version of Windows 11 to combat the installer problem.

Is msi center safe