wixtoolset

Products

ProductCVEsExploitedLatest
issues3–Mar 24, 2024

Exploited and recent CVEs

  • CVE-2024-29188 High 7.8 Malicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated files 0.2%
  • CVE-2024-29187 High 7.3 WiX based installers are vulnerable to binary hijack when run as SYSTEM 0.5%
  • CVE-2024-24810 High 8.3 WiX is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges 0.2%