CVE-2022-42291CWE-1386

NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently delete…

High · published February 7, 2023

CVSS v3.1
8.2
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently delete data from a linked location, which may lead to data tampering. An attacker does not have explicit control over the exploitation of this vulnerability, which requires the user to explicitly launch the installer from the compromised directory.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00219 · 11.7th percentile
Weakness
CWE-1386 · Insecure Operation on Windows Junction / Mount Point
Published
2023-02-07T02:16Z
EPSS history
Timeline
  • 07 FEB 02:16Z
    NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently delete…
    cvelistv5