VULNERABILITY INTELLIGENCE

CVE-2024-24810

CVSS score8.2 HIGH
EPSS probability0.24%
CISA KEVNot currently listed
Published2024-02-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Description

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges. This impacts any installer built with the WiX installer framework. This issue has been patched in version 4.0.4.

Weakness classification

  • security-advisories@github.com: CWE-426

Primary references