Skip to content
OpenAdvisories

Package · NuGet

WixToolset.Sdk

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.3
    CVE-2024-29187

    WiX based installers are vulnerable to binary hijack when run as SYSTEM

    WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. When a bundle runs as SYSTEM user, Burn uses GetTempPathW which points to an insecure directory C:\Windows\Temp to drop and load multiple binaries. Standard …

    wixtoolset issues wix WixToolset.Sdk NuGet