Microsoft released a patch to fix the key vulnerability of Win10 and Win11: malware can be installed

Microsoft released a security update today, which fixes the "critical" vulnerability in Win10 and Win11 systems. After being exploited by an attacker, malicious software can be installed on the user's machine.

This vulnerability exists in the ms appinstaller Uniform Resource Identifier (URI) scheme. By using this vulnerability, an attacker can bypass conventional security measures and quietly implant dangerous software when users browse the web.

Attackers use ms appinstaller to hide shortcuts and secretly install malware on the victim PC. Microsoft has disabled this shortcut in this patch, which means that any application downloaded from the website must pass the security check as if it were a normal file download.