VULNERABILITY INTELLIGENCE
CVE-2025-43715
CVSS score8.1 HIGH
EPSS probability0.33%
CISA KEVNot currently listed
Published2025-04-17
Last modified2026-10-15
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM during an installation, because the temporary plugins directory is created under %WINDIR%\temp and unprivileged users can place a crafted executable file by winning a race condition. This occurs because EW_CREATEDIR does not always set the CreateRestrictedDirectory error flag.
Weakness classification
- cve@mitre.org: CWE-754