References https://support.microsoft.com/zh-cn/topic/ms15-074-windows-installer-%E6%9C%8D%E5%8A%A1%E4%B8%AD%E7%9A%84%E6%BC%8F%E6%B4%9E%E5%8F%AF%E8%83%BD%E5%85%81%E8%AE%B8%E7%89%B9%E6%9D%83%E6%8F%90%E5%8D%87-2015-%E5%B9%B4-7-%E6%9C%88-14-%E6%97%A5-f8098b21-9ab7-a0a6-bddb-a287351f4665 https://guanjia.qq.com/knowledge-base/content/171 https://www.h3c.com/cn/d_201508/887649_30003_0.htm https://www.gm7.org/archives/13426 https://www.qianxin.com/news/detail?news_id=2906 https://zhuanlan.zhihu.com/p/440528969 https://www.secrss.com/articles/29378 https://it.ruc.edu.cn/wlaq/fb93492b60e74fb29ade63065608acd2.htm https://zone.ci/aliyun/ali_nvd/133987.html https://www.cnblogs.com/dxmao/articles/17683817.html http://nic.jiangnan.edu.cn/info/1102/3491.htm https://docs.cyberark.com/epm/latest/en/content/featurespotlight/windowsinstallerelevation.htm https://cloud.google.com/blog/topics/threat-intelligence/privileges-third-party-windows-installers/ https://medium.com/@amaraltohami30/privilege-escalation-using-alwaysinstallelevated-feature-in-windows-32f61babda49 https://www.connectwise.com/resources/windows-installer-elevation-of-privilege-vulnerability https://nvd.nist.gov/vuln/detail/cve-2020-0683 https://www.tenable.com/plugins/nessus/84745 https://socprime.com/blog/detecting-windows-installer-zero-day-cve-2021-41379-exploits/ https://blog.0patch.com/2021/01/windows-installer-local-privilege.html https://support.microsoft.com/zh-cn/topic/ms14-049-windows-installer-%E6%9C%8D%E5%8A%A1%E4%B8%AD%E7%9A%84%E6%BC%8F%E6%B4%9E%E5%8F%AF%E8%83%BD%E5%85%81%E8%AE%B8%E7%89%B9%E6%9D%83%E6%8F%90%E5%8D%87-2014-%E5%B9%B4-8-%E6%9C%88-12-%E6%97%A5-4456fd5e-e66e-383b-c9b2-825e0293f20d
Related VulnerabilitiesPoCCVE-2026-41452: Krayin CRM < 2.2.1 - Installer Authentication BypassPoCCVE-2026-42221: Nginx UI <= 2.3.7 - Unauthenticated Installer ExposurePoCconcrete5-installer: Concrete5 - Installer Page ExposurePoCctrlpanel-installer: CtrlPanel Installer ExposurePoCdzzoffice-installer: DzzOffice - Installer Page ExposurePoCmybb-installer: MyBB Installation Panel - DetectPoCosticket-installer: osTicket Installer Panel - DetectPoCxoops-installer: XOOPS Installation Page - ExposurePoCbudibase-admin-installer: Budibase - Admin InstallerPoCuptime-kuma-installer: Uptime Kuma - InstallerPoCchatwoot-installer: Chatwoot - InstallationPoCfilestash-installer: Filestash - Installer ExposurePoCkrayin-installer: Krayin CMS - Installer