nvidia Archives - CVE Vulnerability

CVE-2018-6261

Sun, 26 Feb 2023 06:50:39 +0000

NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled which sets incorrect permissions on a file, which may to code execution, denial of service, or escalation of privileges by users with system access.

The post CVE-2018-6261 appeared first on CVE Vulnerability.

CVE-2018-6257

Sun, 26 Feb 2023 06:50:39 +0000

NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled where improper access control may lead to a denial of service, escalation of privileges, or both.

The post CVE-2018-6257 appeared first on CVE Vulnerability.

CVE-2020-5990

Sun, 26 Feb 2023 06:42:33 +0000

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in the ShadowPlay component which may lead to local privilege escalation, code execution, denial of service or information disclosure.

The post CVE-2020-5990 appeared first on CVE Vulnerability.

CVE-2020-5978

Sun, 26 Feb 2023 06:42:33 +0000

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in its services in which a folder is created by nvcontainer.exe under normal user login with LOCAL_SYSTEM privileges which may lead to a denial of service or escalation of privileges.

The post CVE-2020-5978 appeared first on CVE Vulnerability.

CVE-2020-5977

Sun, 26 Feb 2023 06:42:33 +0000

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure.

The post CVE-2020-5977 appeared first on CVE Vulnerability.

CVE-2020-5964

Sun, 26 Feb 2023 06:42:32 +0000

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure.

The post CVE-2020-5964 appeared first on CVE Vulnerability.

CVE-2020-5958

Sun, 26 Feb 2023 06:42:32 +0000

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can plant a malicious DLL file, which may lead to code execution, denial of service, or information disclosure.

The post CVE-2020-5958 appeared first on CVE Vulnerability.

CVE-2020-5957

Sun, 26 Feb 2023 06:42:32 +0000

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges.

The post CVE-2020-5957 appeared first on CVE Vulnerability.

CVE-2019-5688

Sun, 26 Feb 2023 06:33:44 +0000

NVIDIA NVFlash, NVUFlash Tool prior to v5.588.0 and GPUModeSwitch Tool prior to 2019-11, NVIDIA kernel mode driver (nvflash.sys, nvflsh32.sys, and nvflsh64.sys) contains a vulnerability in which authenticated users with administrative privileges can gain access to device memory and registers of other devices not managed by NVIDIA, which may lead to escalation of privileges, information disclosure, or denial of service.

The post CVE-2019-5688 appeared first on CVE Vulnerability.

CVE-2019-5687

Sun, 26 Feb 2023 06:33:44 +0000

NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which an incorrect use of default permissions for an object exposes it to an unintended actor

The post CVE-2019-5687 appeared first on CVE Vulnerability.