Vulnerabilities

TI-2026-30497 CVE-2026-42171 · GHSA-594m-24qw-wfmp

Uncontrolled search path in Nullsoft Scriptable Install System

LOW 35

NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as SYSTEM, allowing local attackers to gain privileges (if they can cause my_GetTempFileName to return…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0021 Published 2026-04-24 Fixed in 3.12 CWE-427

TI-2023-19004 CVE-2023-37378 · GHSA-5r79-3284-v2f8

Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an uninstaller directory.

LOW 32

Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an uninstaller directory.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0098 Published 2023-07-03 No fix listed

TI-2015-07646 CVE-2015-9268 · GHSA-xcj3-538v-c35r

Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against…

LOW 37

Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version.dll.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01532 Published 2018-10-01 No fix listed CWE-20

TI-2015-07645 CVE-2015-9267 · GHSA-q9w8-9j2h-5cw2

Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations…

LOW 25

Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00386 Published 2018-10-01 No fix listed CWE-269

Vulnerabilities

Filters

Uncontrolled search path in Nullsoft Scriptable Install System

Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an uninstaller directory.

Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against…

Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations…