CVE-2021-22037

Under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg.exe system command. The full path to the command is not enforced, which results in a search in the search path until a binary can be identified. This makes the installer/uninstaller vulnerable to Path Interception by Search Order Hijacking, potentially allowing an attacker to plant a malicious reg.exe command so it takes precedence over the system command. The vulnerability only affects Windows installers.

• CWE-427

• https://blog.installbuilder.com/2021/10/installbuilder-2160-released.htmlRelease Notes, Vendor Advisory
• https://blog.installbuilder.com/2021/10/installbuilder-2160-released.htmlRelease Notes, Vendor Advisory

Published

Oct 29, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-2203Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9
• CVE-2021-22030In versions of Greenplum database prior to 5.28.14 and 6.17.…6.5
• CVE-2021-22033Releases prior to VMware vRealize Operations 8.6 contain a S…2.7
• CVE-2021-22034Releases prior to VMware vRealize Operations Tenant App 8.6 …7.5
• CVE-2021-22035VMware vRealize Log Insight (8.x prior to 8.6) contains a CS…4.3
• CVE-2021-22036VMware vRealize Orchestrator ((8.x prior to 8.6) contains an…6.5
• CVE-2021-22038On Windows, the uninstaller binary copies itself to a fixed …8.8
• CVE-2021-2204Vulnerability in the Oracle WebLogic Server product of Oracl…5.3
• CVE-2021-22040VMware ESXi, Workstation, and Fusion contain a use-after-fre…6.7
• CVE-2021-22041VMware ESXi, Workstation, and Fusion contain a double-fetch …6.7
• CVE-2021-22042VMware ESXi contains an unauthorized access vulnerability du…7.8
• CVE-2021-22043VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vu…7.5