Inno Setup

inno_setup

Vendor: Jrsoftware • 2 CVEs

CVEs (2)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2025-15595

1Jrsoftware

1Inno Setup

Jun 17, 2026

Mar 3, 2026

5.7 MEDIUM· v4

7.8 HIGH· v3

N/A· v2

Privilege escalation via dll hijacking in Inno Setup 6.2.1 and ealier versions.

CVE-2017-20051

1Jrsoftware

1Inno Setup

Sep 30, 2026

Jun 16, 2022

N/A· v4

N/A· v3

N/A· v2

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The sole source documents PE-format conformance defects in innosetup-5.5.9.exe with no exploit, attack path, or untrusted search path condition (CWE-426/427), and the author states Windows loads these files normally; the record's remote/exploited claims are unsupported, as is the product maintainer's contention.Show less