Vulnerabilities

TI-2025-11394 CVE-2025-12418 · GHSA-frcm-hvx7-5p9q

Potential Denial of Service in Supported Versions of Revenera InstallShield

LOW 24

Potential Denial of Service issue in all supported versions of Revenera InstallShield version 2025 R1, 2024 R2, 2023 R2, and prior.

CVSS 4.0MEDIUM 5.6 Local Low privileges User interaction EPSS 0.00162 Published 2025-11-07 Fixed in InstallShield2025R1-CVE-2025-12418-SecurityPatch CWE-59

TI-2024-13014 CVE-2024-14012 · GHSA-2frg-67w9-883j

Potential Privilege Escalation in Revenera InstallShield 2023 R1

LOW 33

Potential privilege escalation issue in Revenera InstallShield version 2023 R1 running a renamed Setup.exe on Windows.

CVSS 4.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00133 Published 2025-10-29 No fix listed CWE-426

TI-2024-07009 CVE-2024-7562 · GHSA-6mwp-44r4-pwrq

A potential elevated privilege issue has been reported with InstallShield built…

LOW 31

A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured.

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00155 Published 2025-06-12 No fix listed CWE-379

TI-2023-13524 CVE-2023-29080 · GHSA-jgh6-r92w-wgcf

Privilege escalation in InstallShield

LOW 38

Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or InstallScript MSI project extracting few binaries to a prede…

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00169 Published 2025-01-30 Fixed in 2022 R2 (28.0.0.763), 2021 R2 (27.0.0.126) CWE-552

TI-2023-13525 CVE-2023-29081 · GHSA-c5pj-hf7f-p4j3

InstallShield Symlink Vulnerability Affecting Suite Project Setups

LOW 24

A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00144 Published 2024-01-26 Fixed in 2023 R2 CWE-276

TI-2007-05441 CVE-2007-5661 · GHSA-3xq6-78gm-vp7x

The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0…

MEDIUM 44

The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control, which allows remote attackers to download a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02246 Published 2008-04-04 No fix listed CWE-94