All products

wix

NuGet · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
WiX based installers are vulnerable to binary hijack when run as SYSTEMCVE-2024-29187 · GHSA-RF39-3F98-XR7R wixwixtoolset.sdk NuGet High Fix reported
Malicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated filesCVE-2024-29188 · GHSA-JX4P-M4WM-VVJG wixwixtoolset.util.wixext NuGet High Fix reported
WiX Toolset's .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privilegesCVE-2024-24810 · GHSA-7WH2-WXC7-9PH5 wix NuGet High Fix reported