CVE-2025-23358: NVIDIA Nvapp

High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days.

NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue. A successful exploit of this vulnerability might lead to code execution and escalation of privileges.

Affected products

• NVIDIA Nvapp: before 11.0.5.260 (fixed in 11.0.5.260)

Published 2025-11-04. Last modified 2026-06-17.