Installer Vulnerability in NVIDIA NVApp for Windows
CVE-2025-23358

8.2HIGH

Key Information:

Vendor

Nvidia
Status
Nvapp
Vendor
CVE Published:
4 November 2025

What is CVE-2025-23358?

The NVIDIA NVApp for Windows is vulnerable due to an issue in the installer that allows local attackers to manipulate the search path element. This vulnerability could be leveraged for unauthorized code execution and to escalate privileges within the system. Proper security measures and updates are essential to mitigate such risks.

Affected Version(s)

NVApp Windows All versions prior to 11.0.5.260

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23358
https://www.cve.org/CVERecord?id=CVE-2025-23358
https://nvidia.custhelp.com/app/answers/detail/a_id/5717

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.