PatchTheCVEinstallbuilder vulnerabilities and fixes
Recent CVEs affecting installbuilder, with upgrade or downgrade steps. 3 tracked.
installbuilder has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-11-18. Highest priority: CVE-2021-22038 (score 46/100).
- CVE-2022-31694 HIGH 7.3 UPGRADE InstallBuilder Qt installers built with versions previous to 22.10 try to load DLLs from the installer binary
- CVE-2021-22038 HIGH 8.8 UPGRADE On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed (the or
- CVE-2021-22037 HIGH 7.8 UPGRADE Under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg.exe system co
FAQ
How do I fix installbuilder vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is installbuilder being exploited right now?
None of the tracked installbuilder CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which installbuilder CVE should I patch first?
CVE-2021-22038 currently ranks highest (46/100): On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed (the or.