Vendors / Nullsoft Records 77 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 27
CVSS high 25
Exploited now Nullsoft records in CISA KEV No Nullsoft vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Records 4 records in Nullsoft Scriptable Install System · all components
Priority LOW 37
Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version.dll.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01532 · Published 2018-10-01 · No fix listed CWE-20
Priority LOW 35
NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as SYSTEM, allowing local attackers to gain privileges (if they can cause my_GetTempFileName to return…
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.0021 · Published 2026-04-24 · Fixed in 3.12 CWE-427
Priority LOW 32
Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an uninstaller directory.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0098 · Published 2023-07-03 · No fix listed
Priority LOW 25
Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00386 · Published 2018-10-01 · No fix listed CWE-269
Open these records in search → All records by CVSS severity
27 25 19 6 0
THREATIST.IORead the docs