CVE-2021-41526

—

CVSS 3.1

7.8 high

EPSS

<1%p20

Published

Mar 29, 2023 (Mar 29, 2023)

Modified

Jun 17, 2026

Description

A vulnerability has been reported in the windows installer (MSI) built with InstallScript custom action. This vulnerability may allow privilege escalation when invoked ‘repair’ of the MSI which has an InstallScript custom action.

Vendors: flexera
Products: revenera installshield
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.