Security Bulletin: NVIDIA GeForce Experience - December 2019

2019-12-23T00:00:00
ID NVIDIA:4954
Type nvidia
Reporter Nvidia
Modified 2019-12-23T09:40:00

Description

Details

This section summarizes the potential impact that this security update addresses. Descriptions use CWE™, and base scores and vectors use CVSS V3 standards.

CVE | Description | Base Score | Vector
---|---|---|---
CVE‑2019‑5702 | NVIDIA GeForce Experience contains a vulnerability when GameStream is enabled in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges. | 8.4 | AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

The NVIDIA risk assessment is based on an average of risk across a diverse set of installed systems and may not represent the true risk to your local installation. NVIDIA recommends consulting a security or IT professional to evaluate the risk to your specific configuration.