Debian/nsis: high 7.8
NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as SYSTEM, allowing local attackers to gain privileges (if they can cause my_GetTem
Action: Upgrade nsis to 3.12-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.12-1 | - |
Fixed versions
| 3.12-1 |
Sources
- osv: DEBIAN-CVE-2026-42171#Debian:14/nsis
- https://security-tracker.debian.org/tracker/CVE-2026-42171
published · modified · JSON