NVIDIA NVApp for Windows Vulnerability Let Attackers Execute Malicious Code
\n \t
\n
<\/BR>
\n
\n \t
\n
<\/BR><\/p>\n
NVIDIA has patched a critical vulnerability in its App for Windows that could allow local attackers to execute arbitrary code and escalate privileges on affected systems.<\/p>\n
Tracked as CVE-2025-23358<\/a>, the flaw exists in the installer component. It poses a significant security risk to Windows users running the application.<\/p>\n The vulnerability stems from a search path element issue within the NVIDIA App installer, classified under CWE-427.<\/p>\n An attacker with local access and low privileges can exploit this flaw by manipulating the search path to inject malicious code.<\/p>\n The vulnerability requires user interaction to trigger, but successful exploitation grants complete code execution and allows privilege escalation <\/a>across the entire system.<\/p>\n CVE-2025-23358 with a CVSS v3.1 base score of 8.2, the vulnerability<\/a> carries a High severity rating.<\/p>\n The attack vector is purely local, meaning an attacker must have physical or logical access to the target machine.<\/p>\n However, the low attack complexity, combined with the ability to escalate privileges, makes this flaw particularly dangerous in multi-user environments and corporate settings.<\/p>\n NVIDIA App for Windows versions before 11.0.5.260 are vulnerable to this attack. Users running any version before this patch release<\/a> remain exposed to potential exploitation.<\/p>\n The company recommends that all affected users immediately download and install version 11.0.5.260 or later from the official NVIDIA App website to mitigate the risk.<\/p>\nVulnerability Details and Technical Impact<\/strong><\/h2>\n