CVE-2022-42292

MEDIUM

5.0

Description

NVIDIA GeForce Experience contains a vulnerability in the NVContainer component, where a user without administrator privileges can create a symbolic link to a file that requires elevated privileges to write to or modify, which may lead to denial of service, escalation of privilege or limited data tampering.

Details CVE

Score CVSS v3.15.0

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H

Vecteur d'attaqueLOCAL

ComplexiteHIGH

Privileges requisLOW

Interaction utilisateurREQUIRED

Publie2/12/2023

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

microsoft:windowsnvidia:geforce_experience

Faiblesses (CWE)

CWE-59CWE-59

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5384(psirt@nvidia.com)

https://nvidia.custhelp.com/app/answers/detail/a_id/5384(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.