CVE-2025-23297: NVIDIA App

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

NVIDIA Installer for NvAPP for Windows contains a vulnerability in the FrameviewSDK installation process, where an attacker with local unprivileged access could modify files in the Frameview SDK directory. A successful exploit of this vulnerability might lead to escalation of privileges.

Affected products

• NVIDIA NVIDIA App: before 11.0.5.245 (fixed in 11.0.5.245)

Published 2025-10-01. Last modified 2026-06-17.