Nullsoft
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Nullsoft Scriptable Install System | 2 | – | Apr 24, 2026 |
Exploited and recent CVEs
- CVE-2026-42171 NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as SYSTEM, allowing local attackers to gain privileges (if they can cause my_GetTem 0.2%
- CVE-2025-43715 Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM during an installation, because the temporary plugins directory is created under %W 0.3%