Wixtoolset vulnerabilities
We track 3 vulnerabilities in Wixtoolset products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 24, 2024.
Latest Wixtoolset vulnerabilities
- 7.9 High severity
issues: Improper Link Resolution Before File Access
WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The custom action behind WiX's `RemoveFolderEx` functionality could allow a standard user to delete protected directories. `RemoveFolderEx` deletes an entire
- 7.3 High severity
issues: Incorrect Permission Assignment for Critical Resource
WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. When a bundle runs as SYSTEM user, Burn uses GetTempPathW which points to an insecure directory C:\Windows\Temp to drop and load multiple binaries. Standard u
- 7.8 High severity
issues: Untrusted Search Path
WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges. This impacts any installer built with the WiX ins