CVEvulnerability

CVE-2022-42291

5.5 MEDIUM Published 2023-02-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-02-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.2 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weaknesses
CWE-1386, CWE-59

Description

NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently delete data from a linked location, which may lead to data tampering. An attacker does not have explicit control over the exploitation of this vulnerability, which requires the user to explicitly launch the installer from the compromised directory.

Affected configurations

• nvidia geforce experience (< 3.27.0.112)

Related

Weakness · CWE (2)

  • CWE-1386 Insecure Operation on Windows Junction / Mount Point weakness
  • CWE-59 Improper Link Resolution Before File Access weakness

References