InstallShield vulnerabilities

3 known vulnerabilities in InstallShield from Revenera. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  InstallShield: Untrusted Search Path

  CVE-2024-14012Oct 29, 2025Revenera

  Potential privilege escalation issue in Revenera InstallShield version 2023 R1 running a renamed Setup.exe on Windows. When a local administrator executes a renamed Setup.exe, the MPR.dll may get loaded from an insecure location and can result in a privilege e

• 7.3 High severity

  InstallShield: Creation of Temporary File in Directory with Insecure Permissions

  CVE-2024-7562Jun 12, 2025Revenera

  A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. All supported versions (InstallShield 2023 R2, InstallShield 2022 R2 and InstallShield 2021 R2) are a

• 8.5 High severity

  InstallShield: Files or Directories Accessible to External Parties

  CVE-2023-29080Jan 30, 2025Revenera

  Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or InstallScript MSI project extracting few binaries to a predefined writable folder during installatio