Design/Logic Flaw

NVIDIA GeForce Experience prior to 3.20.1 and Windows GPU Display Driver all versions contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs without validating the path or signature als...

CVE-2019-5695

The CVE-2019-5695 issue concerns NVIDIA GeForce Experience (pre-3.20.1) and Windows GPU Display Driver across all versions, where the local service provider component improperly loads Windows system DLLs without path/signature validation (a DLL preloading/binary planting flaw). This can enable a ...

CVE-2019-5695

NVIDIA GeForce Experience prior to 3.20.1 and Windows GPU Display Driver all versions contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs without validating the path or signature als...

Unspecified Vulnerabilities in NVIDIA GPUModeSwitch Tool and NVIDIA NVFlash

NVIDIA NVFlash and GPUModeSwitch Tool are both products of NVIDIA Corporation.NVIDIA NVFlash is a tool for flashing the BIOS firmware of NVIDIA graphics cards.GPUModeSwitch Tool is an NVIDIA GPU mode change utility program. A security vulnerability exists in NVIDIA GPUModeSwitch Tool and NVIDIA...

PT-2019-4227

Name of the Vulnerable Software and Affected Versions Windows Certificate Dialog affected versions not specified Nvidia Control Panel affected versions not specified Description An elevation of privilege issue exists due to improper enforcement of user privileges. This allows attackers to...

NVIDIA GeForce Experience Code Issue Vulnerability

NVIDIA GeForce Experience is a set of automatic graphics card update tools from NVIDIA. The product is capable of automatically updating graphics card drivers and supports graphics card performance management and optimization, among other things. A code issue vulnerability exists in NVIDIA GeForc...

NVIDIA Windows GPU Display Driver Denial of Service Vulnerability (CNVD-2019-40475)

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. A denial of service vulnerability exists in the kernel mode layer nvlddmkm.sys of the NVIDIA Windows GPU Display Driver. The vulnerability stems from a program that...

NVIDIA Windows GPU Display Driver Null Pointer Dereference Vulnerability

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. A null pointer dereference vulnerability exists in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in the NVIDIA Windows GPU Display Driver. An attacker...

NVIDIA Windows GPU Display Driver Elevation of Privilege and Denial of Service Vulnerability

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. An elevation of privilege and denial of service vulnerability exists in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in the NVIDIA Windows GPU Display...

NVIDIA Virtual GPU Manager vGPU Component Input Validation Error Vulnerability

NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from NVIDIA. vGPU is one of the virtual FPU components. An input validation error vulnerability exists in the vGPU plugin in NVIDIA Virtual GPU Manager all versions, which stems from the program failing to properly validate...

Unspecified Vulnerability in NVIDIA Virtual GPU Manager

NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from NVIDIA. A security vulnerability exists in NVIDIA Virtual GPU Manager all versions, which can be exploited by attackers to disclose information or cause a denial of service...

CVE-2019-5698

NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin, in which an input index value is incorrectly validated, which may lead to denial of service...

CVE-2019-5701

NVIDIA GeForce Experience, all versions prior to 3.20.0.118, contains a vulnerability when GameStream is enabled in which an attacker with local system access can load the Intel graphics driver DLLs without validating the path or signature also known as a binary planting or DLL preloading attack,...

CVE-2019-5693

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys in which the program accesses or uses a pointer that has not been initialized, which may lead to denial of service...

CVE-2019-5690

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the size of an input buffer is not validated, which may lead to denial of service or escalation of privileges...

CVE-2019-5691

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which a NULL pointer is dereferenced, which may lead to denial of service or escalation of privileges...

CVE-2019-5692

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the product uses untrusted input when calculating or using an array index, which may lead to escalation of privileges or denial of service...

CVE-2019-5689

NVIDIA GeForce Experience, all versions prior to 3.20.1, contains a vulnerability in the Downloader component in which a user with local system access can craft input that may allow malicious files to be downloaded and saved. This behavior may lead to code execution, denial of service, or...

CVE-2019-5694

NVIDIA Windows GPU Display Driver, R390 driver version, contains a vulnerability in NVIDIA Control Panel in which it incorrectly loads Windows system DLLs without validating the path or signature also known as a binary planting or DLL preloading attack, which may lead to denial of service or...

CVE-2019-5696

NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in which the provision of an incorrectly sized buffer by a guest VM leads to GPU out-of-bound access, which may lead to a denial of service...