Flexera InstallShield < 2024 R1 Privilege Escalation (CVE-2024-7562)

The version of Flexera InstallShield installed on the remote host is prior to 2024 R1. It is, therefore, affected by a privilege escalation vulnerability: - A privilege escalation vulnerability exists in standalone MSI setups built with InstallShield that have multiple InstallScript custom action...

CVE-2024-7562

creationtimestamp| type| source ---|---|--- 2025-06-12 16:34:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18194 2025-06-12 17:31:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrghb7wf5u2m...

CVE-2024-7562

A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. All supported versions InstallShield 2023 R2, InstallShield 2022 R2 and InstallShield 2021 R2 are affected by this issue...

CVE-2024-7562

CVE-2024-7562 affects InstallShield Standalone MSI packages built with multiple InstallScript custom actions across versions 2021 R2, 2022 R2, and 2023 R2. The issue is a potential elevation of privilege with local attack vector and low attacker privileges, leading to impacts on confidentiality, ...