AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-43715

HIGH · CVSS 8.1 EPSS 0.19%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-04-17 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.1. It affects Windows.

CVE
CVE-2025-43715
Severity
HIGH
CVSS
8.1
EPSS
0.19%
Windows

Original NVD Description

Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM during an installation, because the temporary plugins directory is created under %WINDIR%\temp and unprivileged users can place a crafted executable file by winning a race condition. This occurs because EW_CREATEDIR does not always set the CreateRestrictedDirectory error flag.