PatchTheCVEadvanced installer vulnerabilities and fixes
Recent CVEs affecting advanced installer, with upgrade or downgrade steps. 3 tracked.
Also searched as: advancedinstaller.
advanced installer has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-09-30. Highest priority: CVE-2022-27438 (score 59/100).
- CVE-2022-27438 HIGH 8.1 UPGRADE DOWNGRADE Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer
- CVE-2023-25396 HIGH 7.8 UPGRADE Privilege escalation in the MSI repair functionality in Caphyon Advanced Installer 20.0 and below allows attac
- CVE-2022-4956 HIGH 7.8 DOWNGRADE A vulnerability classified as critical has been found in Caphyon Advanced Installer 19.7
FAQ
How do I fix advanced installer vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is advanced installer being exploited right now?
None of the tracked advanced installer CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which advanced installer CVE should I patch first?
CVE-2022-27438 currently ranks highest (59/100): Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer.