Nullsoft Nullsoft Scriptable Install System

• CVE-2026-42171 High 7.8 NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as SYSTEM, allowing local attackers to gain privileges (if they can cause my_GetTem 0.2%
• CVE-2025-43715 High 8.1 Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM during an installation, because the temporary plugins directory is created under %W 0.3%