CVE-2024-14012 - CVE House
Back to Database
Status published High CVE-2024-14012

Potential Privilege Escalation in Revenera InstallShield 2023 R1

Vulnerability Description

Potential privilege escalation issue in Revenera InstallShield version 2023 R1 running a renamed Setup.exe on Windows. When a local administrator executes a renamed Setup.exe, the MPR.dll may get loaded from an insecure location and can result in a privilege escalation. The issue has been fixed in versions 2023 R2 and later.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-14012

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

InstallShield
Vulnerable Versions:
2023.R1

Timeline

Official Publish: October 29th, 2025
Last Modified: October 29th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)