CVE-2023-37378

CVE-2023-37378 concerns Nullsoft Scriptable Install System (NSIS) prior to 3.09, where an uninstaller directory’s access control is mishandled. This could enable an attacker with local access to abuse the uninstaller folder if NSIS is used on a system, potentially permitting escalation of privile...

CVE-2015-9267

CVE-2015-9267 affects NSIS (Nullsoft Scriptable Install System) before 2.49. The vulnerability arises from the use of temporary folder locations, enabling unprivileged local users to overwrite files, which can allow replacing either an installer plugin or the uninstaller with a trojan. In practic...