VDB

DEBIAN-CVE-2025-43715

DEBIAN-CVE-2025-43715 PUBLISHED CVSS 8.100000381469727 HIGH

Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM during an installation, because the temporary plugins directory is created under %WINDIR%\temp and unprivileged users can place a crafted executable file by winning a race condition. This occurs because EW_CREATEDIR does not always set the CreateRestrictedDirectory error flag.

Risk Scores

CVSS v3.1
8.100000381469727
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected Products

VendorProductVersions
Debian:12nsis0, 3.08-3, 3.09-1
Debian:11nsis3.09-2, 3.09-3, 3.09-4
Debian:14nsis0, 0
Debian:13nsis0, 0

Timeline

  • Apr 17, 2025 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›