High severity · published Jun 12, 2025
CVE-2024-7562
A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured
7.3
CVSS
0.1%
EPSS
No
On KEV
Description
A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. All supported versions (InstallShield 2023 R2, InstallShield 2022 R2 and InstallShield 2021 R2) are affected by this issue.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
InstallShield · Revenera
2023 R2; 2022 R2; 2021 R2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-7562
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-7562
community.revenera.com
https://community.revenera.com/s/article/cve-2024-7562-privilege-escalation-vulnerability-in-created-msi-packages
More from InstallShield
8.5
CVE-2023-29080
Privilege escalation in InstallShield
7.3
CVE-2024-14012
Potential Privilege Escalation in Revenera InstallShield 2023 R1
5.6
CVE-2025-12418
Potential Denial of Service in Supported Versions of Revenera InstallShield
5.5
CVE-2023-29081
InstallShield Symlink Vulnerability Affecting Suite Project Setups
–
CVE-2007-5661
The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control,…