CVE-2021-44900: Msi App Player

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Micro-Star International (MSI) App Player <= 4.280.1.6309 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulnerabilities in the NTIOLib_X64.sys and BstkDrv_msi2.sys drivers components. All the vulnerabilities are triggered by sending specific IOCTL requests.

Affected products

• Msi App Player: up to and including 4.280.1.6309

Published 2022-02-04. Last modified 2026-06-17.