CVE-2025-23297: High severity Nvidia NVApp vulnerability
NVIDIA Installer for NvAPP for Windows contains a vulnerability in the FrameviewSDK installation process, where an attacker with local unprivileged access could modify files in the Frameview SDK directory. A successful exploit of this vulnerability might lead to escalation of privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-23297?
CVE-2025-23297 is classified as a high severity vulnerability due to its potential to allow privilege escalation.
How do I fix CVE-2025-23297?
To fix CVE-2025-23297, update the NVIDIA Installer for NvAPP to the latest version provided by NVIDIA.
What could an attacker achieve by exploiting CVE-2025-23297?
An attacker exploiting CVE-2025-23297 could gain elevated privileges by modifying files in the Frameview SDK directory.
Who is affected by CVE-2025-23297?
Users of the NVIDIA Installer for NvAPP on Windows systems are affected by CVE-2025-23297.
Is local access required to exploit CVE-2025-23297?
Yes, local unprivileged access is required to exploit CVE-2025-23297.