7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
The NVIDIA Windows GPU Display driver is vulnerable to several security vulnerabilities as described by the following CVEs:
CVEID:CVE-2019-5677
**DESCRIPTION:**NVIDIA Windows GPU Display driver is vulnerable to a denial of service, caused by a flaw in the kernel mode layer (nvlddmkm.sys) handler for DeviceIoControl. A local authenticated attacker could exploit this vulnerability to cause the application to crash.
CVSS Base score: 5.6
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/161195 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H)
CVEID:CVE-2019-5676
**DESCRIPTION:**NVIDIA Windows GPU Display driver could allow a local authenticated attacker to execute arbitrary code on the system, caused by the loading of dynamic-linked libraries in an insecure manner. By placing a specially-crafted .DLL file, an attacker could exploit this vulnerability to execute arbitrary code and escalate privileges on the system.
CVSS Base score: 7.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/161196 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H)
CVEID:CVE-2019-5675
**DESCRIPTION:**NVIDIA Windows GPU Display driver could allow a local authenticated attacker to gain elevated privileges on the system, caused by a flaw in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape. An attacker could exploit this vulnerability to cause denial of service, escalation of privileges, or information disclosure.
CVSS Base score: 7.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/161197 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:H)
Affected Product(s) | Version(s) |
---|---|
NVIDIA GPU Display Driver for Windows | 412.29 |
Affected Product(s)
|
Version(s)
—|—
NVIDIA GPU Display Driver for Windows
(nvda_dd_video_441.22_windows_x86-64)
(nvda_dd_video_441.22_win2016_x86-64)
|
441.22
None
CPE | Name | Operator | Version |
---|---|---|---|
nvidia gpu display driver for windows | eq | 412.29 |
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C