CVE-2020-5977

2020-10-2317:35:15

nvidia

www.cve.org

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

29.4%

JSON

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure.

CNA Affected

[
  {
    "product": "NVIDIA GeForce Experience Software",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to 3.20.5.70"
      }
    ]
  }
]

References

nvidia.custhelp.com/app/answers/detail/a_id/5076