CVE-2025-12418 - CVE House
Back to Database
Status published Medium CVE-2025-12418

Potential Denial of Service in Supported Versions of Revenera InstallShield

Vulnerability Description

Potential Denial of Service issue in all supported versions of Revenera InstallShield version 2025 R1, 2024 R2, 2023 R2, and prior. When e.g., a local administrator performs an uninstall, a symlink may get followed on removal of a user writeable configuration directory and induce a Denial of Service as a result. The issue is resolved through the hotfixes InstallShield2025R1-CVE-2025-12418-SecurityPatch, InstallShield2024R2-CVE-2025-12418-SecurityPatch, and InstallShield2023R2-CVE-2025-12418-SecurityPatch.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-12418

Credits & Attribution

No credits recorded in the NVD database.

References

More from Revenera

View All →
CVE-2024-7562
A potential elevated privilege issue has been reported with InstallShield...
High 7.3
CVE-2024-14012
Potential Privilege Escalation in Revenera InstallShield 2023 R1
High 7.3
CVE-2023-29081
InstallShield Symlink Vulnerability Affecting Suite Project Setups
Medium 5.5
CVE-2023-29080
Privilege escalation in InstallShield
High 8.5

Affected Vendor

Affected Software

InstallShield
Vulnerable Versions:
2023.R1, 2024.R1, 2025.R1

Timeline

Official Publish: November 7th, 2025
Last Modified: November 13th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-59

MITRE ATT&CK TTPs

T1574 Hijack Execution Flow
Privilege Escalation
T1222 File and Directory Permissions Modification
Defense Evasion
T1005 Data from Local System
Collection
T1565 Data Manipulation
Impact
T1078 Valid Accounts
Persistence