Advisories · Technology

VMware InstallBuilder.

Every CVE that names VMware InstallBuilder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-31694 CVE record

CVSS 7.3 High

Uncontrolled search path in VMware InstallBuilder
- VMware InstallBuilder
- CWE-427
Not analysed yet 18 Nov 2022
CVE-2021-22037 CVE record

Under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg.exe system command.
- VMware InstallBuilder
Not analysed yet 29 Oct 2021
CVE-2021-22038 CVE record

On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed (the originally called uninstaller exits, so it does not block the installation directory).
- VMware InstallBuilder
Not analysed yet 29 Oct 2021
CVE-2020-3979 CVE record

InstallBuilder for Qt Windows (versions prior to 20.7.0) installers look for plugins at a predictable location at initialization time, writable by non-admin users.
- VMware InstallBuilder
Not analysed yet 18 Sept 2020
CVE-2020-3946 CVE record

VMware InstallBuilder: InstallBuilder AutoUpdate tool and regular installers enabling <checkForUpdates> built…
- VMware InstallBuilder
Not analysed yet 20 Apr 2020