Known vulnerabilities in Nullsoft Scriptable Install System (NSIS)
Vendor:
Nullsoft
Software CPE:
cpe:2.3:a:nullsoft:nsis:*:*:*:*:*:*:*:*
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
3.12
3.11
3.10
3.09
3.08
3.07
3.06.1
3.06
3.05
3.04
3.03
3.02.1
3.02
3.01
3.0
2.51
2.50
2.49
2.48
2.47
2.46
2.45
2.44
2.43
2.42
2.41
2.40
2.39
2.38
2.37
2.36
2.35
2.34
2.33
2.32
2.31
2.30
2.29
2.28
2.27
2.26
2.25
2.24
2.23
2.22
2.21
2.20
2.19
2.18
2.17
2.16
2.15
2.14
2.13
2.12
2.11
2.10
2.09
2.08
2.07
2.06
2.05
2.04
2.03
2.02
2.01
2.0
1.98
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU115188 - Improper Check for Unusual or Exceptional Conditions CVE-2025-43715 |
CWE-754 | Low | 3.11 | 12.09.2025 |
SB2025091250 |
||
| #VU83210 - Uncontrolled Search Path Element CVE-2015-9268 |
CWE-427 | High | 2.49 | 15.11.2023 |
SB2018100116 SB2023111544 |
||
| #VU79794 - Incorrect Default Permissions CVE-2023-37378 |
CWE-276 | Low | 3.09 | 21.08.2023 |
SB2023082135 SB2023082169 SB2023082170 |