CVE-2019-5687

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which an incorrect use of default permissions for an object exposes it to an unintended actor...

CVE-2019-5683

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the user mode video driver trace logger component. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of...

CVE-2019-5685

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause an out of bounds access to a shader local temporary array, which may lead to denial of service or code execution...

CVE-2019-5684

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause an out of bounds access of an input texture array, which may lead to denial of service or code execution...

Design/Logic Flaw

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause an out of bounds access to a shader local temporary array, which may lead to denial of service or code execution...

Design/Logic Flaw

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause an out of bounds access of an input texture array, which may lead to denial of service or code execution...

Design/Logic Flaw

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the software uses an API function or data structure in a way that relies on properties that are not always guaranteed to be valid, which may lead to...

Design/Logic Flaw

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the user mode video driver trace logger component. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of...

CVE-2019-5687

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which an incorrect use of default permissions for an object exposes it to an unintended actor...

CVE-2019-5687

CVE-2019-5687 affects the NVIDIA Windows GPU Display Driver (kernel mode nvlddmkm.sys) with a flaw in the DxgkDdiEscape handler caused by an incorrect use of default permissions, exposing an object to an unintended actor. The vulnerability is documented across multiple sources (NVD entry, Red Hat...

CVE-2019-5686

The CVE-2019-5686 issue affects NVIDIA Windows GPU Display Driver for Windows, specifically the kernel-mode nvlddmkm.sys DxgkDdiEscape handler. The vulnerability arises from using an API function or data structure in a way that relies on properties not always guaranteed to be valid, which can lea...

CVE-2019-5686

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the software uses an API function or data structure in a way that relies on properties that are not always guaranteed to be valid, which may lead to...

CVE-2019-5685

Affected software: NVIDIA Windows GPU Display Driver for Windows. Vulnerability: DirectX shader processing flaw can cause an out-of-bounds access/write to a shader local temporary array, potentially enabling denial of service or arbitrary code execution. Root cause: out-of-bounds handling in shad...

CVE-2019-5685

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause an out of bounds access to a shader local temporary array, which may lead to denial of service or code execution...

CVE-2019-5684

CVE-2019-5684 affects the NVIDIA Windows GPU Display Driver for Windows. The vulnerability is in the DirectX shader path and can cause an out-of-bounds access (as described in NVD) or out-of-bounds write (per IBM’s vulnerability details), potentially enabling denial of service or arbitrary code e...

CVE-2019-5683

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the user mode video driver trace logger component. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of...

CVE-2019-5683

CVE-2019-5683 affects NVIDIA Windows GPU Display Driver (all versions) via the user-mode video driver trace logger. The issue arises when a local attacker with system access creates a hard link and the driver fails to detect hard-link attacks, potentially enabling code execution, denial of servic...

rubygems: XSS vulnerability in homepage attribute when displayed via gem server

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Cross Site Scripting XSS vulnerability in gem server display of homepage attribute that can...

poppler: memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo...

Security Bulletin: NVIDIA GPU Display Driver - August 2019

NVIDIA has released a software security update for the NVIDIA GPU Display Driver. This update addresses issues that may lead to local code execution, denial of service, or escalation of privileges. To protect your system, download and install this software update through NVIDIA Driver Downloads G...