PT-2023-1475 · Nvidia · Nvidia Geforce Experience

·

CVE-2022-31611

·

Published

2023-01-30

·

Updated

2023-02-14

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience (affected versions not specified)
Description The issue is related to an uncontrolled search path vulnerability in the client installers of NVIDIA GeForce Experience. This vulnerability can be exploited by an attacker with user-level privileges to load an arbitrary DLL when the installer is launched, potentially leading to escalation of privileges and code execution.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2023-00884
CVE-2022-31611

Affected Products

Nvidia Geforce Experience