Please report the issue by drafting a new security advisory on GitHub.
Security: wixtoolset/issues
Security
SECURITY.md
-
Malicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated filesGHSA-jx4p-m4wm-vvjg published
Mar 23, 2024 by robmenHigh -
WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEMGHSA-rf39-3f98-xr7r published
Mar 23, 2024 by robmenHigh -
.be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privilegesGHSA-7wh2-wxc7-9ph5 published
Feb 7, 2024 by robmenHigh
Learn more about advisories related to wixtoolset/issues in the GitHub Advisory Database