CVE:CVE-2021-43239
CNNVD:CNNVD-202112-1144
Microsoft Windows Update是美国微软（Microsoft）公司的一个程序更新服务。
Microsoft Windows Update Stack存在权限许可和访问控制问题漏洞。以下产品和版本受到影响：Windows 10 Version 2004 for 32-bit Systems,Windows 10 Version 2004 for ARM64-based Systems,Windows 10 Version 2004 for x64-based Systems,Windows Server, version 2004 (Server Core installation),Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 for 32-bit Systems,Windows 10 Version 20H2 for ARM64-based Systems,Windows Server, version 20H2 (Server Core Installation),Windows 11 for x64-based Systems,Windows 11 for ARM64-based Systems,Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 for ARM64-based Systems,Windows 10 Version 21H2 for x64-based Systems,Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version 21H1 for ARM64-based Systems,Windows 10 Version 21H1 for 32-bit Systems,Windows Server 2022,Windows Server 2022 (Server Core installation)
solution:Upgrade microsoft windows_10 to a higher version than 20h2,21h1,21h2,2004,and avoid the version 20h2,21h1,21h2,2004; Upgrade microsoft windows_11 to a higher version than -; Upgrade microsoft windows_server to a higher version than 20h2,2022,and avoid the version 20h2,2022; Upgrade microsoft windows_server_2016 to a higher version than 2004,and avoid the version 2004