CVE-2016-8819

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a handle to a kernel object may be returned to the user, leading to possible denial of service or escalation of privileges...

CVE-2016-8822

CVE-2016-8822 concerns the NVIDIA Windows GPU Display Driver (nvlddmkm.sys). The vulnerability exists in the kernel-mode layer handler for DxgDdiEscape IDs 0x600000E, 0x600000F, and 0x6000010, where a value supplied by a user is used as an index into an internal array without proper validation, e...

CVE-2016-8818

All versions of NVIDIA Windows GPU Display contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where a pointer passed from a user to the driver is used without validation, leading to denial of service or potential escalation of privileges...

CVE-2016-8820

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where a check on a function return value is missing, potentially allowing an uninitialized value to be used as the source of a strcpy call, leading to denial of...

CVE-2016-8813

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where multiple pointers are used without checking for NULL, leading to denial of service or potential escalation of privileges...

CVE-2016-8815

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where a value passed from a user to the driver is used without validation as the index to an array, leading to denial of service or potential escalation of...

CVE-2016-8815

CVE-2016-8815 affects all versions of the NVIDIA Windows GPU Display Driver. The kernel-mode driver (nvlddmkm.sys) in the DxgDdiEscape path uses a user-supplied value as an array index without validation, enabling either denial of service or potential privilege escalation. Documents consistently ...

CVE-2016-8814

NVIDIA Windows GPU Display Driver (nvlddmkm.sys) contains a set of local, kernel-mode vulnerabilities in the DxgDdiEscape/DxgkDdiEscape handlers. The issues arise from using pointers without NULL checks or validating user-supplied input, leading to denial of service and potential privilege escala...

CVE-2016-8813

CVE-2016-8813 affects NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the DxgkDdiEscape/DxgDdiEscape path, where multiple pointers are used without NULL checks. Root cause: NULL pointer dereference/improper input validation in the kernel mode layer, enabling denial of service and potential pr...

CVE-2016-8817

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where a value passed from a user to the driver is used without validation as the size input to memcpy, causing a buffer overflow, leading to denial of service o...

CVE-2016-8824

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where improper access controls allow a regular user to write a part of the registry intended for privileged users only, leading to escalation of privileges...

CVE-2016-8826

CVE-2016-8826 affects NVIDIA GPU Display Driver. The vulnerability exists in the kernel-mode layer (nvlddmkm.sys on Windows, nvidia.ko on Linux) and can allow a local attacker to trigger a GPU interrupt storm, resulting in a denial of service. Multiple OpenVAS/Nessus/Mageia/U buntu advisories ref...

CVE-2016-8818

CVE-2016-8818 affects the NVIDIA Windows GPU Display Driver, specifically the kernel-mode layer nvlddmkm.sys handling of DxgDdiEscape. A user-supplied pointer is used without validation, enabling potential denial of service or privilege escalation on affected Windows systems. Public details acros...

CVE-2016-8819

NVIDIA Windows GPU Display Driver (nvlddmkm.sys) contains multiple vulnerabilities in the kernel mode layer DxgkDdiEscape handler. The Lenovo advisory and NVIDIA/NVD records describe issues including NULL-pointer checks and improper input handling, leading to denial of service and privilege escal...

CVE-2016-8822

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x600000E, 0x600000F, and 0x6000010 where a value passed from a user to the driver is used without validation as the index to an internal array, leading to...

CVE-2016-8821

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where improper access controls may allow a user to access arbitrary physical memory, leading to an escalation of privileges...

NVIDIA Windows Kernel Mode Driver Local Denial of Service Vulnerability

NVIDIA Windows Kernel Mode Driver is the display driver. A local denial of service vulnerability exists in the NVIDIA Windows Kernel Mode Driver. A local attacker could exploit this issue to cause a denial of service condition...

UBUNTU-CVE-2016-8826

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys for Windows or nvidia.ko for Linux where a user can cause a GPU interrupt storm, leading to a denial of service...

Microsoft Windows Secure Kernel Mode Privilege Elevation Vulnerability (3205642)

This host is missing an important security update according to Microsoft Bulletin MS16-150. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-149: Security Update for Microsoft Windows (3205655)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in a Windows Crypto driver running in kernel mode due to improper handling of objects in memory. A local attacker can exploit this, via a...