VYPR
High severity7.5NVD Advisory· Published Feb 15, 2017· Updated May 13, 2026

CVE-2017-0317

CVE-2017-0317

Description

All versions of NVIDIA GPU and GeForce Experience installer contain a vulnerability where it fails to set proper permissions on the package extraction path thus allowing a non-privileged user to tamper with the extracted files, potentially leading to escalation of privileges via code execution.

Affected products

2
  • cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*
  • Nvidia Corporation/Windows GPU Display Driverv5
    Range: All

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.