Nullsoft Scriptable Install System vulnerabilities

5 vulnerabilities

Known vulnerabilities in Nullsoft Scriptable Install System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.3CVE-2015-9268debiannsis+3
EPSS score
1.54%
Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime.5.5CVE-2015-9267debiannsis+3
EPSS score
0.39%
Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.8.1CVE-2025-43715debiannsis+2
EPSS score
0.24%
Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM during an installation, because the temporary plugins directory is created under %WINDIR%\temp and unprivileged users can place a crafted executable file by winning a race condition. This occurs because EW_CREATEDIR does not always set the CreateRestrictedDirectory error flag.7.8CVE-2026-42171debiannsis+2
EPSS score
0.24%
NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as SYSTEM, allowing local attackers to gain privileges (if they can cause my_GetTempFileName to return 0, as shown in the references).5.3CVE-2023-37378debiannsis+3
EPSS score
0.88%
Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an uninstaller directory.