Security Bulletin: NVIDIA GeForce Experience - September 2018

NVIDIA has released a software update to address potential security vulnerabilities in GeForce Experience. When GameStream is enabled and an unauthorized user gains system access, these issues may lead to limited user information disclosure, denial of service, or escalation of privileges. To...

NVIDIA GeForce Experience Information Disclosure Vulnerability

NVIDIA GeForce Experience is a suite of automatic graphics card update tools from NVIDIA. An information disclosure vulnerability exists in NVIDIA GeForce Experience versions prior to 3.14.1, which can be exploited by attackers to conduct man-in-the-middle attacks and obtain sensitive information...

NVIDIA GeForce Experience Denial of Service Vulnerability

NVIDIA GeForce Experience is a suite of automatic graphics card update tools from NVIDIA. A denial of service vulnerability exists in NVIDIA GeForce Experience, which can be exploited by attackers to cause a denial of service and elevation of privilege...

NVIDIA GeForce Experience Information Disclosure Vulnerability (CNVD-2019-28603)

NVIDIA GeForce Experience is a suite of automatic graphics card update tools from NVIDIA. An information disclosure vulnerability exists in NVIDIA GeForce Experience. An attacker can exploit this vulnerability to disclose restricted information...

CVE-2018-6257

NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled where improper access control may lead to a denial of service, escalation of privileges, or both...

CVE-2018-6258

NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability during GameStream installation where an attacker who has system access can potentially conduct a Man-in-the-Middle MitM attack to obtain sensitive information...

PT-2018-17446

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 3.14.1 Description The issue concerns a potential vulnerability when GameStream is enabled, an attacker has system access, and certain system features are enabled, where limited information disclosur...

PT-2018-17444

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 3.14.1 Description The issue is related to improper access control when GameStream is enabled, potentially leading to a denial of service or escalation of privileges. Recommendations For versions pri...

PT-2018-17445

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 3.14.1 Description The issue concerns a potential vulnerability during GameStream installation, where an attacker with system access can conduct a Man-in-the-Middle MitM attack to obtain sensitive...

CVE-2018-6258: Undefined Security Weakness

NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability during GameStream installation where an attacker who has system access can potentially conduct a Man-in-the-Middle MitM attack to obtain sensitive information...

CVE-2018-6257: Undefined Security Weakness

NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled where improper access control may lead to a denial of service, escalation of privileges, or both...

CVE-2018-6259: Exposure of Sensitive Information to an Unauthorized Actor

NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled, an attacker has system access, and certain system features are enabled, where limited information disclosure may be possible...

macOS #Kernel - Use-After-Free Due to Lack of Locking in nvidia GeForce Driver Exploit

Exploit for macOS platform in category dos / poc / nvDevice::SetAppSupportBits is external method 0x107 of the nvAccelerator IOService. It calls taskdeallocate without locking. Two threads can race calling this external method to drop two task references when only one is held. Note that the repro...

Apple macOS Kernel - Use-After-Free Due to Lack of Locking in nvidia GeForce Driver

/ nvDevice::SetAppSupportBits is external method 0x107 of the nvAccelerator IOService. It calls taskdeallocate without locking. Two threads can race calling this external method to drop two task references when only one is held. Note that the repro forks a child which give the nvAccelerator a...

PT-2017-10519

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 3.10.0.55 Description The issue arises from a lack of validation of a value passed from a user to the driver in the NVISystemService64 component of the NVIDIA Installer Framework. This could...

CVE-2017-6250

NVIDIA GeForce Experience contains a vulnerability in NVIDIA Web Helper.exe, where untrusted script execution may lead to violation of application execution policy and local code execution...

CVE-2017-6250

NVIDIA GeForce Experience contains a vulnerability in NVIDIA Web Helper.exe, where untrusted script execution may lead to violation of application execution policy and local code execution...

PT-2017-16953

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience affected versions not specified Description The issue concerns untrusted script execution in NVIDIA Web Helper.exe, potentially leading to a violation of application execution policy and allowing local code execution...

CVE-2017-6250: Undefined Security Weakness

NVIDIA GeForce Experience contains a vulnerability in NVIDIA Web Helper.exe, where untrusted script execution may lead to violation of application execution policy and local code execution...

Security Bulletin: NVIDIA GeForce Experience contains a vulnerability in NVIDIA Web Helper.exe (repackaged Node.js)

Vulnerability Details The following section summarizes the vulnerability and CVSS risk assessment. CVE-2017-6250 NVIDIA GeForce Experience contains a vulnerability in NVIDIA Web Helper.exe, where untrusted script execution may lead to violation of application execution policy and local code...