CVE-2024-14012CWE-426

CVE-2024-14012

published October 29, 2025

CVSS
7.3
EPSS
0%
Percentile
2.7
In the wild
Unconfirmed
What it is

Potential privilege escalation issue in Revenera InstallShield version 2023 R1 running a renamed Setup.exe on Windows. When a local administrator executes a renamed Setup.exe, the MPR.dll may get loaded from an insecure location and can result in a privilege escalation. The issue has been fixed in versions 2023 R2 and later.

The record
Technical detail
CVSS
7.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00134 · 2.7th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2025-10-29T20:15Z
References (1)
https://community.revenera.com/s/article/CVE-2024-14012-Potential-Privilege-Escalation-in-InstallShield-2023-R1 · [email protected]
EPSS history
Timeline
  • 29 OCT 15:30Z
    Potential Privilege Escalation in Revenera InstallShield 2023 R1
    cvelistv5