Home NVIDIA CVE-2025-23276
Back to NVIDIA

CVE-2025-23276

NVIDIA Installer for Windows

NVIDIA CVSS 7.8 Updated March 12, 2026

Executive Risk Summary

"A vulnerability in the NVIDIA Installer for Windows allows an attacker to escalate privileges, potentially leading to denial of service, code execution, information disclosure, and data tampering. Successful exploitation may result in significant system compromise."

Operational Audit Arsenal

Target Type Executable
Target Asset NVIDIA Installer
Standard Path %ProgramFiles%\NVIDIA Corporation\Installer2
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: NVIDIA Installer (Executable)
$Targets = 'NVIDIA Installer'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Likely

Graphics and compute services may be affected

Internal Work Notes

CVE-2025-23276: NVIDIA Installer privilege escalation vulnerability, potential for significant system compromise, requires prompt patching

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related NVIDIA Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.