Installshield
Approved changes feed: RSS · Atom
cpe:2.3:a:revenera:installshield:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Revenera (cc3fe4c5-f39c-5e8e-b116-81e61ccedf73) |
|---|---|
| Product | Installshield (7b077aa7-6347-57fb-8c77-a4e998dba79c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-12418 |
vulnerable | 2026-06-08 07:04:30.208786 |
Potential Denial of Service in Supported Versions of Revenera InstallShield
Potential Denial of Service issue in all supported versions of Revenera InstallShield version 2025 R1, 2024 R2, 2023 R2, and prior. When e.g., a local administrator performs an uninstall, a symlink may get followed on removal of a user writeable configuration directory and induce a Denial of Service as a result. The issue is resolved through the hotfixes InstallShield2025R1-CVE-2025-12418-SecurityPatch, InstallShield2024R2-CVE-2025-12418-SecurityPatch, and InstallShield2023R2-CVE-2025-12418-SecurityPatch.
Published: 2025-11-07T21:27:04.650Z
Updated: 2025-11-13T14:26:11.510Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7562 |
vulnerable | 2026-06-08 06:58:22.672936 |
Details available
A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. All supported versions (InstallShield 2023 R2, InstallShield 2022 R2 and InstallShield 2021 R2) are affected by this issue.
Published: 2025-06-12T16:05:31.562Z
Updated: 2025-06-17T18:17:28.748Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-14012 |
vulnerable | 2026-06-08 06:25:38.894591 |
Potential Privilege Escalation in Revenera InstallShield 2023 R1
Potential privilege escalation issue in Revenera InstallShield version 2023 R1 running a renamed Setup.exe on Windows. When a local administrator executes a renamed Setup.exe, the MPR.dll may get loaded from an insecure location and can result in a privilege escalation. The issue has been fixed in versions 2023 R2 and later.
Published: 2025-10-29T15:30:53.784Z
Updated: 2025-10-29T17:40:17.707Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29081 |
vulnerable | 2026-06-08 06:02:38.591904 |
InstallShield Symlink Vulnerability Affecting Suite Project Setups
MEDIUM (5.5)
A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2. This vulnerability may allow locally authenticated users to cause a Denial of Service (DoS) condition when handling move operations on local, temporary folders.
Published: 2024-01-26T20:02:50.978Z
Updated: 2025-05-29T15:12:06.187Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29080 |
vulnerable | 2026-06-08 06:02:38.591243 |
Privilege escalation in InstallShield
Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or InstallScript MSI project extracting few binaries to a predefined writable folder during installation time. The standard user account has write access to these files and folders, hence replacing them during installation time can lead to a DLL hijacking vulnerability.
Published: 2025-01-30T17:41:55.526Z
Updated: 2025-02-12T17:03:46.935Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.