CVE-2025-43715
- State
- Published
- Severity
- 8.1 High
- Published
- Apr 17, 2025
- Updated
- Oct 15, 2026
- Reserved
- Apr 17, 2025
Description
Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM during an installation, because the temporary plugins directory is created under %WINDIR%\temp and unprivileged users can place a crafted executable file by winning a race condition. This occurs because EW_CREATEDIR does not always set the CreateRestrictedDirectory error flag.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.1 High | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H | mitre |
Weaknesses
- CWE-754 Improper Check for Unusual or Exceptional Conditions
Affected Products
| Product | Versions |
|---|---|
Nullsoft Scriptable Install SystemNullsoft |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.