OpenSSL Vulnerability in NVIDIA NvContainer Service on Windows
CVE-2025-23253
What is CVE-2025-23253?
The NVIDIA NvContainer service for Windows is susceptible to a vulnerability stemming from improper handling of OpenSSL, where a hard-coded constant can be exploited. An attacker could craft a malicious DLL and place it in a predetermined path, potentially leading to various impacts such as code execution, denial of service, privilege escalation, information disclosure, or data tampering. It is imperative for users to assess their systems and apply recommended security measures to mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
NVIDIA App Windows All versions up to and including 11.0.2.337 (prod2 hotfix)
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved