VULNERABILITY INTELLIGENCE

CVE-2017-0317

CVSS score7.5 HIGH
EPSS probability0.41%
CISA KEVNot currently listed
Published2017-02-15
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Description

All versions of NVIDIA GPU and GeForce Experience installer contain a vulnerability where it fails to set proper permissions on the package extraction path thus allowing a non-privileged user to tamper with the extracted files, potentially leading to escalation of privileges via code execution.

Weakness classification

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references