Nullsoft vulnerabilities
We track 2 vulnerabilities in Nullsoft products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 24, 2026.
2vulnerabilities
0critical
2high
0exploited
7.9average CVSS score
Latest Nullsoft vulnerabilities
- 7.8 High severity
Nullsoft Scriptable Install System: Uncontrolled Search Path Element
NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as SYSTEM, allowing local attackers to gain privileges (if they can cause my_GetTempFileName to return 0, as shown in the references).
- 8.1 High severity
Nullsoft Scriptable Install System: Improper Check for Unusual or Exceptional Conditions
Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM during an installation, because the temporary plugins directory is created under %WINDIR%\temp and unprivileged users can place a crafted execu