CVE-2025-23347CWE-276

CVE-2025-23347

High · published October 23, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
5.5
In the wild
Unconfirmed
What it is

⚡ A sneaky escalation of privileges is lurking in NVIDIA's Project G-Assist! All it takes is a crafty move from an attacker to unleash chaos! 🔥 Think of it like a hotel guest finding an unguarded back door to the management office. Once inside, they could change reservations, access sensitive files, or even lock out other guests—an absolute mess! If exploited, this vulnerability could lead to a range of disastrous outcomes: unauthorized code execution, tampering with critical data, or even causing denial of service. This could leave your system vulnerable and users frustrated, making it a potential nightmare for any organization relying on this software.

Put simply

Think of it like a hotel guest finding an unguarded back door to the management office. Once inside, they could change reservations, access sensitive files, or even lock out other guests—an absolute mess! This vulnerability allows attackers to escalate their permissions within the NVIDIA Project G-Assist framework, leading to unauthorized access and control over the system. It opens the door for executing malicious code and altering sensitive information.

What to do

If exploited, this vulnerability could lead to a range of disastrous outcomes: unauthorized code execution, tampering with critical data, or even causing denial of service. This could leave your system vulnerable and users frustrated, making it a potential nightmare for any organization relying on this software. To safeguard against this vulnerability, ensure you update to the latest version of NVIDIA Project G-Assist as soon as it's available. Strengthening access controls and regularly auditing user permissions will also help mitigate potential risks. You've got this! Stay proactive with your security measures, and you'll keep your systems safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00166 · 5.5th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2025-10-23T23:15Z
References (3)
EPSS history
Timeline
  • 23 OCT 18:26Z
    NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions
    cvelistv5