Wix Toolset

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-24810 NuGet HIGH PATCH This Week

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Wix Toolset

NVD GitHub

CVSS 3.1

7.8

EPSS

0.2%

CVE-2019-16511 MEDIUM PATCH This Month

An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Microsoft Wix Toolset

NVD GitHub

CVSS 3.1

5.5

EPSS

1.5%

CVE-2024-24810 NuGet

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Privilege Escalation Microsoft Wix Toolset

NVD GitHub

CVE-2019-16511

EPSS 2% CVSS 5.5

MEDIUM PATCH This Month

Path Traversal Microsoft Wix Toolset

NVD GitHub