NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently delete data from a linked location, which may lead to data tampering. An attacker does not have explicit control over the exploitation of this vulnerability, which requires the user to explicitly launch the installer from the compromised directory.
References
| Link | Resource |
|---|---|
| https://nvidia.custhelp.com/app/answers/detail/a_id/5384 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
07 Nov 2023, 03:53
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently delete data from a linked location, which may lead to data tampering. An attacker does not have explicit control over the exploitation of this vulnerability, which requires the user to explicitly launch the installer from the compromised directory. |
14 Feb 2023, 23:10
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:nvidia:geforce_experience:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
| CWE | CWE-59 | |
| First Time |
Microsoft windows
Microsoft Nvidia geforce Experience Nvidia |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| References | (MISC) https://nvidia.custhelp.com/app/answers/detail/a_id/5384 - Vendor Advisory |
07 Feb 2023, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-02-07 03:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-42291
Mitre link : CVE-2022-42291
CVE.ORG link : CVE-2022-42291
JSON object : View
Products Affected
microsoft
- windows
nvidia
- geforce_experience