CVE-2020-5963

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure...

CVE-2020-5964

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure...

CVE-2020-5963

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure...

CVE-2020-5965

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver nvwgf2um/x.dll, in which a specially crafted shader can cause an out of bounds access, leading to denial of service...

Design/Logic Flaw

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver nvwgf2um/x.dll, in which a specially crafted shader can cause an out of bounds access, leading to denial of service...

Information disclosure

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure...

CVE-2020-5964

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure...

CVE-2020-5964

The CVE-2020-5964 issue affects the NVIDIA Windows GPU Display Driver and is described in multiple sources as a vulnerability in the service host component where the integrity check of application resources may be missed, potentially enabling code execution, denial of service, or information disc...

CVE-2020-5965

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver nvwgf2um/x.dll, in which a specially crafted shader can cause an out of bounds access, leading to denial of service...

CVE-2020-5965

CVE-2020-5965 affects the NVIDIA Windows GPU Display Driver, specifically the DirectX 11 user mode driver component nvwgf2um/x.dll. A specially crafted shader can trigger an out-of-bounds access, leading to denial of service. The vulnerability is mapped to the NVIDIA GPU Display Driver family and...

CVE-2020-5963

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure...

CVE-2020-5963

The provided documents describe CVE-2020-5963 as a vulnerability in the Inter Process Communication APIs of the NVIDIA Windows GPU Display Driver (affecting all versions). Reported impact includes code execution, denial of service, and information disclosure via a local attacker with low attack c...

CVE-2020-5962

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component, in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

CVE-2020-5962

CVE-2020-5962 affects the NVIDIA Windows GPU Display Driver (all versions), specifically the NVIDIA Control Panel component. A local attacker can corrupt a system file, which may lead to denial of service or privilege escalation. The available connected sources describe the vulnerability and its ...

CVE-2020-5962

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component, in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

CVE-2020-5963

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure...

CVE-2020-5967

NVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in which a race condition may lead to a denial of service...

Security Bulletin: NVIDIA GPU Display Driver - June 2020

NVIDIA has released a software security update for NVIDIA GPU Display Driver. This update addresses issues that may lead to denial of service, escalation of privileges, or information disclosure. To protect your system, download and install this software update through the NVIDIA Driver Downloads...

CVE-2020-5973

NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which there is the potential to execute privileged operations, which may lead to denial of service. This affects vGPU version 8.x prior to 8.4, version 9.x prior to 9.4 and version 10.x prior to 10.3...

FF Sandbox Escape (CVE-2020-12388)

By James Forshaw, Project Zero In my previous blog post I discussed an issue with the Windows Kernel’s handling of Restricted Tokens which allowed me to escape the Chrome GPU sandbox. Originally I’d planned to use Firefox for the proof-of-concept as Firefox uses the same effective sandbox level a...