Privilege Escalation Vulnerability in Revenera InstallShield by Revenera
CVE-2024-14012

7.3HIGH

Key Information:

Vendor

Revenera

Status
Installshield
Vendor
CVE Published:
29 October 2025

What is CVE-2024-14012?

A potential privilege escalation vulnerability exists in Revenera InstallShield version 2023 R1 that may be exploited when a local administrator executes a renamed Setup.exe on a Windows system. In such cases, the MPR.dll may be loaded from an insecure location, allowing unauthorized actions to be performed. This risk underscores the importance of system administrators adhering to best security practices when managing software installations. The issue has been addressed in versions 2023 R2 and later.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

InstallShield Windows 2023.R1

References

https://community.revenera.com/s/article/CVE-2024-14012-P...

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.