CVE-2018-6265

NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 during application installation on Windows 7 in elevated privilege mode, where a local user who initiates a browser session may obtain escalation of privileges on the browser...

CVE-2018-6266

NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows where a local user may obtain third party integration parameters, which may lead to information disclosure...

CVE-2018-6263

NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows in which an attacker who has access to a local user account can plant a malicious dynamic link library DLL during application installation, which may lead to escalation of privileges...

Information disclosure

NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows where a local user may obtain third party integration parameters, which may lead to information disclosure...

CVE-2018-6263: Undefined Security Weakness

NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows in which an attacker who has access to a local user account can plant a malicious dynamic link library DLL during application installation, which may lead to escalation of privileges...

CVE-2018-6266: Exposure of Sensitive Information to an Unauthorized Actor

NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows where a local user may obtain third party integration parameters, which may lead to information disclosure...

CVE-2018-6265: Undefined Security Weakness

NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 during application installation on Windows 7 in elevated privilege mode, where a local user who initiates a browser session may obtain escalation of privileges on the browser...

Security Bulletin: NVIDIA GeForce Experience - November 2018

NVIDIA has released a software update for GeForce Experience. This update addresses issues that may lead to escalation of privileges or information disclosure. To protect your system, download and install this software update through the GeForce Experience Downloads page. Details This section...

CVE-2018-6262: Exposure of Sensitive Information to an Unauthorized Actor

NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled where limited sensitive user information may be available to users with system access, which may lead to information disclosure...

CVE-2018-6261: Incorrect Permission Assignment for Critical Resource

NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled which sets incorrect permissions on a file, which may to code execution, denial of service, or escalation of privileges by users with system access...

Security Bulletin: NVIDIA GeForce Experience - September 2018

NVIDIA has released a software update to address potential security vulnerabilities in GeForce Experience. When GameStream is enabled and an unauthorized user gains system access, these issues may lead to limited user information disclosure, denial of service, or escalation of privileges. To...

NVIDIA GeForce Experience Information Disclosure Vulnerability

NVIDIA GeForce Experience is a suite of automatic graphics card update tools from NVIDIA. An information disclosure vulnerability exists in NVIDIA GeForce Experience versions prior to 3.14.1, which can be exploited by attackers to conduct man-in-the-middle attacks and obtain sensitive information...

NVIDIA GeForce Experience Denial of Service Vulnerability

NVIDIA GeForce Experience is a suite of automatic graphics card update tools from NVIDIA. A denial of service vulnerability exists in NVIDIA GeForce Experience, which can be exploited by attackers to cause a denial of service and elevation of privilege...

NVIDIA GeForce Experience Information Disclosure Vulnerability (CNVD-2019-28603)

NVIDIA GeForce Experience is a suite of automatic graphics card update tools from NVIDIA. An information disclosure vulnerability exists in NVIDIA GeForce Experience. An attacker can exploit this vulnerability to disclose restricted information...

CVE-2018-6257

NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled where improper access control may lead to a denial of service, escalation of privileges, or both...

CVE-2018-6258

NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability during GameStream installation where an attacker who has system access can potentially conduct a Man-in-the-Middle MitM attack to obtain sensitive information...

CVE-2018-6258: Undefined Security Weakness

NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability during GameStream installation where an attacker who has system access can potentially conduct a Man-in-the-Middle MitM attack to obtain sensitive information...

CVE-2018-6257: Undefined Security Weakness

NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled where improper access control may lead to a denial of service, escalation of privileges, or both...

CVE-2018-6259: Exposure of Sensitive Information to an Unauthorized Actor

NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled, an attacker has system access, and certain system features are enabled, where limited information disclosure may be possible...

macOS #Kernel - Use-After-Free Due to Lack of Locking in nvidia GeForce Driver Exploit

Exploit for macOS platform in category dos / poc / nvDevice::SetAppSupportBits is external method 0x107 of the nvAccelerator IOService. It calls taskdeallocate without locking. Two threads can race calling this external method to drop two task references when only one is held. Note that the repro...