PT-2020-18872

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions Description The issue is related to a vulnerability in the kernel mode layer nvlddmkm.sys scheduler. The software does not properly limit the number or frequency of interactions that it has with ...

CVE-2020-5979: Undefined Security Weakness

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which a user is presented with a dialog box for input by a high-privilege process, which may lead to escalation of privileges...

CVE-2020-5980: Undefined Security Weakness

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in multiple components in which a securely loaded system DLL will load its dependencies in an insecure fashion, which may lead to code execution or denial of service...

CVE-2020-5982: Allocation of Resources Without Limits or Throttling

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys scheduler, in which the software does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests, which may lead to...

PT-2020-18869

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions Description The issue concerns a vulnerability in the NVIDIA Control Panel component where a user is presented with a dialog box for input by a high-privilege process, potentially leading to...

PT-2020-18871

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions Description The issue is related to a vulnerability in the DirectX11 user mode driver, specifically in the nvwgf2um/x.dll component, where a specially crafted shader can cause an out of bounds...

CVE-2020-5981: Out-of-bounds Write

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX11 user mode driver nvwgf2um/x.dll, in which a specially crafted shader can cause an out of bounds access, which may lead to denial of service or code execution...

PT-2020-18870

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions Description The issue concerns a vulnerability in multiple components where a securely loaded system DLL loads its dependencies in an insecure fashion. This may lead to code execution or denial o...

HPSBHF03690 rev. 3 - NVIDIA GPU Display Driver September 2020 Security Updates

Potential Security Impact Escalation of Privilege, Code Execution, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT Reported By: NVIDIA VULNERABILITY SUMMARY NVIDIA has informed HP of potential security vulnerabilities in the NVIDIA GPU Display Driver...

NVIDIA Windows GPU Display Driver Code Issue Vulnerability (CNVD-2021-27728)

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. kernel mode layer nvlddmkm.sys handler is one of the kernel mode layer handlers. A code issue vulnerability exists in the kernel mode layer nvlddmkm.sys handler...

Security Bulletin: NVIDIA Windows GPU Display Driver has resolved several security vulnerabilities as described below.

Summary The NVIDIA Windows GPU Display Driver has resolved several security vulnerabilities as described by the following CVEs: Vulnerability Details CVEID: CVE-2019-5683 DESCRIPTION: Nvidia Windows GPU Display Driver could allow a local authenticated attacker to gain elevated privileges on the...

CVE-2020-5965

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver nvwgf2um/x.dll, in which a specially crafted shader can cause an out of bounds access, leading to denial of service...

CVE-2020-5963

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure...

CVE-2020-5965: Out-of-bounds Read

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver nvwgf2um/x.dll, in which a specially crafted shader can cause an out of bounds access, leading to denial of service...

PT-2020-18856

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions Description The issue is related to a vulnerability in the DirectX 11 user mode driver, specifically in the nvwgf2um/x.dll component. It can be triggered by a specially crafted shader, leading to...

PT-2020-18855

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions Description The issue is related to a vulnerability in the service host component of the NVIDIA Windows GPU Display Driver, where the application resources integrity check may be missed. This cou...

PT-2020-18857

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions Description The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiEscape, where a NULL pointer is dereferenced. This can lead to denial of service or potential...

CVE-2020-5964: Insufficient Verification of Data Authenticity

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure...

CVE-2020-5966: NULL Pointer Dereference

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, in which a NULL pointer is dereferenced, leading to denial of service or potential escalation of privileges...

CVE-2020-5963: Undefined Security Weakness

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure...