CVE-2024-7562

State: Published
Severity: 7.3 High
Published: Jun 12, 2025
Updated: Jun 17, 2025
Reserved: Aug 6, 2024

Description

A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. All supported versions (InstallShield 2023 R2, InstallShield 2022 R2 and InstallShield 2021 R2) are affected by this issue.

Scores

CVSS	Score	Vector	Source
4.0	7.3 High	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	flexera

Weaknesses

CWE-379

Affected Products

Product	Versions
InstallShieldRevenera	2023 R2Affected 2022 R2Affected 2021 R2Affected

References

https://community.revenera.com/s/article/cve-2024-7562-privilege-escalation-vulnerability-in-created-msi-packages

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.