Vulnerability in Microsoft Windows
CVE-2022-31611
NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may cause the installer to load an arbitrary DLL when the installer is launched. A successful exploit of this vulnerability could lead to escalation of privileges and code execution.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H.
EPSS exploit prediction
EPSS: 0.002 (10.4th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 10th percentile — 10.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Microsoft Windows
- NVIDIA Geforce Experience — versions All versions prior to 3.27.0.112
- NVIDIA Geforce Experience
Weakness classification (CWE)
References
- nvidia.custhelp.com/app/answers/detail/a_id/5384 (Vendor Advisory)
Frequently asked questions
- What is CVE-2022-31611?
- CVE-2022-31611 is a medium-severity vulnerability in Microsoft Windows, classified under Uncontrolled Search Path Element. CVSS score: 6.8/10. Published 2023-02-07.
- How severe is CVE-2022-31611?
- Medium severity. CVSS v3 base score is 6.8 out of 10.