Home Microsoft CVE-2024-24810
Back to Microsoft

CVE-2024-24810

Windows Installer - WiX toolset

Microsoft CVSS 8.2 Updated March 14, 2026

Executive Risk Summary

"The WiX toolset is vulnerable to DLL redirection attacks, allowing attackers to escalate privileges. This vulnerability affects any installer built with the WiX installer framework and has been patched in version 4.0.4."

Operational Audit Arsenal

Target Type DLL
Target Asset .be TEMP folder DLLs
Standard Path %TEMP%
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: .be TEMP folder DLLs (DLL)
$Targets = '.be TEMP folder DLLs'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Likely

Installation services

Internal Work Notes

Apply WiX toolset version 4.0.4 patch to mitigate DLL redirection attacks and prevent privilege escalation.

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Microsoft Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.