CVE-2022-31611

low-risk
Published 2023-02-07

NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may cause the installer to load an arbitrary DLL when the installer is launched. A successful exploit of this vulnerability could lead to escalation of privileges and code execution.

Do I need to act?

-
0.07% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.8/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Nvidia

References (2)

Vendor Advisory https://nvidia.custhelp.com/app/answers/detail/a_id/5384
Vendor Advisory https://nvidia.custhelp.com/app/answers/detail/a_id/5384
27
/ 100
low-risk
Severity 22/34 · High
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal