CVE-2020-5978

NVIDIA GeForce Experience prior to 3.20.5.70 is affected by a vulnerability in the nvcontainer.exe service where a folder is created by a normal user with LOCAL_SYSTEM privileges, potentially enabling denial of service or privilege escalation. Affected product: GeForce Experience (Windows). Root ...

CVE-2020-5990

CVE-2020-5990 affects NVIDIA GeForce Experience on Windows prior to 3.20.5.70, due to a vulnerability in the ShadowPlay component that may lead to local privilege escalation, code execution, denial of service, or information disclosure. The NVIDIA security bulletin confirms the issue and lists 3....

CVE-2020-5977

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure...

CVE-2020-5977

CVE-2020-5977 details (NVIDIA GeForce Experience Windows) : A vulnerability in the NVIDIA Web Helper NodeJS Web Server exists in GeForce Experience all versions before 3.20.5.70. The issue stems from an uncontrolled search path used to load a Node.js module, enabling a local attacker to potential...

Nvidia Warns Gamers of Severe GeForce Experience Flaws

Nvidia, which makes gaming-friendly graphics processing units GPUs, has issued fixes for two high-severity flaws in the Windows version of its GeForce Experience software. GeForce Experience is a supplemental application to the GeForce GTX graphics card — it keeps users’ drivers up-to-date,...

PT-2020-18867

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 3.20.5.70 Description The issue concerns an uncontrolled search path used to load a node module in the NVIDIA Web Helper NodeJS Web Server, potentially leading to code execution, denial of service,...

PT-2020-18868

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 3.20.5.70 Description The issue concerns a vulnerability in the services of NVIDIA GeForce Experience. Specifically, a folder is created by nvcontainer.exe under normal user login with LOCAL SYSTEM...

CVE-2020-5990: Undefined Security Weakness

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in the ShadowPlay component which may lead to local privilege escalation, code execution, denial of service or information disclosure...

CVE-2020-5978: Undefined Security Weakness

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in its services in which a folder is created by nvcontainer.exe under normal user login with LOCALSYSTEM privileges which may lead to a denial of service or escalation of privileges...

CVE-2020-5977: Untrusted Search Path

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure...

PT-2020-18880

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 3.20.5.70 Description The issue concerns a vulnerability in the ShadowPlay component of NVIDIA GeForce Experience, potentially leading to local privilege escalation, code execution, denial of service...

Security Bulletin: NVIDIA GeForce Experience - October 2020

NVIDIA has released a software security update for NVIDIA® GeForce Experience™ software. This update addresses issues that may lead to denial of service, escalation of privileges, code execution, or information disclosure. To protect your system, download and install this software update from the...

CVE-2020-5976

NVIDIA GeForce NOW, versions prior to 2.0.23 Windows, macOS and versions prior to 5.31 Android, Shield TV, contains a vulnerability in the application software where the network test component transmits sensitive information insecurely, which may lead to information disclosure...

CVE-2020-5975

NVIDIA GeForce NOW, versions prior to 2.0.23 on Windows and macOS, contains a vulnerability in the desktop application software that includes sensitive information as part of a URL, which may lead to information disclosure...

CVE-2020-5975

NVIDIA GeForce NOW, versions prior to 2.0.23 on Windows and macOS, contains a vulnerability in the desktop application software that includes sensitive information as part of a URL, which may lead to information disclosure...

CVE-2020-5976

NVIDIA GeForce NOW, versions prior to 2.0.23 Windows, macOS and versions prior to 5.31 Android, Shield TV, contains a vulnerability in the application software where the network test component transmits sensitive information insecurely, which may lead to information disclosure...

Design/Logic Flaw

NVIDIA GeForce NOW, versions prior to 2.0.23 on Windows and macOS, contains a vulnerability in the desktop application software that includes sensitive information as part of a URL, which may lead to information disclosure...

Information disclosure

NVIDIA GeForce NOW, versions prior to 2.0.23 Windows, macOS and versions prior to 5.31 Android, Shield TV, contains a vulnerability in the application software where the network test component transmits sensitive information insecurely, which may lead to information disclosure...

CVE-2020-5975

NVIDIA GeForce NOW, versions prior to 2.0.23 on Windows and macOS, contains a vulnerability in the desktop application software that includes sensitive information as part of a URL, which may lead to information disclosure...

CVE-2020-5976

NVIDIA GeForce NOW, versions prior to 2.0.23 Windows, macOS and versions prior to 5.31 Android, Shield TV, contains a vulnerability in the application software where the network test component transmits sensitive information insecurely, which may lead to information disclosure...