Windows binaries generated with InstallBuilder versions earlier than 19.7.0 are vulnerable to tampering even if they contain a valid Authenticode signature.
CVSS 3.0HIGH 7.8·Local·No auth·User interaction·EPSS 0.00943·Published 2019-08-29·Fixed in 19.7.0