CVE-2026-42171: Nullsoft Scriptable Install System: güvenlik açığı

Açıklama (NVD)

NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as SYSTEM, allowing local attackers to gain privileges (if they can cause my_GetTempFileName to return 0, as shown in the references).

Özet bilgiler

Ürün

Nullsoft Nullsoft Scriptable Install System

CVSS v3.1

7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

%0,21 (yüzdelik 11)

CWE

CWE-427

Yama

Mevcut

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• github.com
• github.com
• learn.microsoft.com
• nsis.sourceforge.io
• CWE-427