CVE-2024-0082
Assigner: nvidia
Published: 2024-04-08T22:00:35.763Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: ChatRTX
vendor: nvidia
versions: status: affected
version: 0.2 and prior versions
descriptions: supportingMedia: base64: yes
type: text/html
value: NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause improper privilege management by sending open file requests to the application. A successful exploit of this vulnerability might lead to local escalation of privileges, information disclosure, and data tampering
value: NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause improper privilege management by sending open file requests to the application. A successful exploit of this vulnerability might lead to local escalation of privileges, information disclosure, and data tampering
impacts: descriptions: value: Privilege escalation, information disclosure, data tampering
metrics: cvssV3_1: baseScore: 8.2
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-269
description: CWE-269
type: CWE
source: discovery: UNKNOWN
title: CVE