CVE-2024-7562CWE-379

A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured

High · published June 12, 2025

CVSS v4.0
7.3
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. All supported versions (InstallShield 2023 R2, InstallShield 2022 R2 and InstallShield 2021 R2) are affected by this issue.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00149 · 3.7th percentile
Weakness
CWE-379 · Creation of Temporary File in Directory with Insecure Permissions
Published
2025-06-12T16:05Z
EPSS history
Timeline
  • 12 JUN 16:05Z
    A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured
    cvelistv5