CVE-2026-42171

Katalog CVE

CVSS 7.8 · High EPSS 0,24%

Kerentanan Uncontrolled Search Path Element pada nullsoft scriptable install system. Skor CVSS 3.1 7.8 (High) menurut mitre.org.

Deskripsi (NVD)

NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as SYSTEM, allowing local attackers to gain privileges (if they can cause my_GetTempFileName to return 0, as shown in the references).

Rincian

Terbit di NVD

24 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber mitre.org
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-427: Uncontrolled Search Path Element

EPSS (30 hari)

0,24% peluang dieksploitasi; lebih tinggi dari 13,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/NSIS-Dev/nsis/commit/8e6f02205d5f22da6c7855dbfe59b2af667330ca patch
• https://github.com/NSIS-Dev/nsis/blob/7359413009afd4f0fff472d841fc2f2cc0e0a5f8/Source/exehead/util.c#L475-L484 product
• https://learn.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-gettempfilename product
• https://nsis.sourceforge.io/Docs/AppendixF.html#v3.12-cl release notes