What’s Vulnerable › Vulnerabilities

CVE-2024-7562

• Severity: high (CVSS 7.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-12 · updated 2026-06-17
• Weakness: CWE-379

Description

A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. All supported versions (InstallShield 2023 R2, InstallShield 2022 R2 and InstallShield 2021 R2) are affected by this issue.

Affected products

• Revenera InstallShield: 2023 R2, 2022 R2, 2021 R2

References

• https://community.revenera.com/s/article/cve-2024-7562-privilege-escalation-vulnerability-in-created-msi-packages

Get alerted when CVE-2024-7562 or the next vulnerability affects your stack