CVE-2023-37378

Summary

CVE-2023-37378 is a vulnerability affecting the Nullsoft Scriptable Install System (NSIS) prior to version 3.09. This issue arises due to NSIS's inability to properly manage access control for uninstaller directories. An attacker can take advantage of this vulnerability to execute arbitrary files located in the uninstaller directory, potentially leading to system compromise. Users are strongly advised to update their NSIS installations to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.