CVE-2025-23358

{
  "id": "CVE-2025-23358",
  "sourceIdentifier": "[email protected]",
  "published": "2025-11-04T20:17:14.563",
  "lastModified": "2026-10-18T21:10:00.120",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue. A successful exploit of this vulnerability might lead to code execution and escalation of privileges."
    },
    {
      "lang": "es",
      "value": "NVIDIA NVApp para Windows contiene una vulnerabilidad en el instalador, donde un atacante local puede causar un problema de elemento de ruta de búsqueda. Un exploit exitoso de esta vulnerabilidad podría conducir a la ejecución de código y a la escalada de privilegios."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "NVIDIA",
          "product": "NVApp",
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "versions": [
            {
              "version": "All versions prior to 11.0.5.260",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
          "baseScore": 8.2,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.5,
        "impactScore": 6.0
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-11-05T04:55:52.372683Z",
          "id": "CVE-2025-23358",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-427"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23358",
      "source": "[email protected]"
    },
    {
      "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5717",
      "source": "[email protected]"
    },
    {
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-23358",
      "source": "[email protected]"
    }
  ]
}