title: CVE
description: NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause improper privilege management by sending open file requests to the application. A successful exploit of this vulnerability might lead to local escalation of privileges, information disclosure, and data tampering
problem types: CWE-269
affected:
{
defaultStatus: unaffected
product: ChatRTX
vendor: nvidia
versions:
status: affected, version: 0.2 and prior versions
}
metrics:
cvssV3_1: [
baseScore: 8.2
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL