CVE-2022-31611
Severity
7.3HIGH
EPSS
0.1%
top 79.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 7
Description
NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may cause the installer to load an arbitrary DLL when the installer is launched. A successful exploit of this vulnerability could lead to escalation of privileges and code execution.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:HExploitability: 1.3 | Impact: 5.5
Affected Packages2 packages
🔴Vulnerability Details
2GHSA▶
GHSA-2v62-25cm-4v7w: NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privilege↗2023-02-07
CVEList▶
CVE-2022-31611: NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privilege↗2023-02-07