CVE-2022-31611CWE-427

NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may…

Medium · published February 7, 2023

CVSS v3.1
6.8
EPSS
0%
Percentile
10.5
In the wild
Unconfirmed
What it is

NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may cause the installer to load an arbitrary DLL when the installer is launched. A successful exploit of this vulnerability could lead to escalation of privileges and code execution.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.5th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2023-02-07T02:22Z
EPSS history
Timeline
  • 07 FEB 02:22Z
    NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may…
    cvelistv5