CVE-2025-47422
High
Description
Advanced Installer before 22.6 has an uncontrolled search path element local privilege escalation vulnerability. When running as SYSTEM in certain configurations, Advanced Installer looks in standard-user writable locations for non-existent binaries and executes them as SYSTEM. A low-privileged attacker can place a malicious binary in a targeted folder; when the installer is executed, the attacker achieves arbitrary SYSTEM code execution.
SeverityHigh
CVSS7.5
Exploit probability—
ProductAdvanced Installer
PublishedJul 8, 2025
First seenJul 8, 2025
Weakness typeCWE-266CWE-266
How to fix
Update
- Advanced Installer22.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Advanced Installer | No range specified | 22.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.