Data Tampering Risk in NVIDIA GeForce Experience Installer
CVE-2022-42291

8.2HIGH

Key Information:

Vendor

Nvidia
Status
Geforce Experience
Vendor
CVE Published:
7 February 2023

What is CVE-2022-42291?

NVIDIA GeForce Experience has a vulnerability in its installer that could allow users to unintentionally delete data from a connected location during the installation process. This vulnerability arises when users run the installer from a compromised directory. While an attacker does not have direct control over the exploitation, awareness of the installation source is crucial to prevent unintended data loss.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

GeForce Experience Windows All versions prior to 3.27.0.112

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5384

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.