CVE-2018-6257

GeForce Experience CVE-2018-6257 affects GeForce Experience 3.x on Windows prior to 3.14.1. The root cause is improper access control when GameStream is enabled, which NVIDIA’s bulletin associates with potential denial of service and privilege escalation (and information disclosure/impact to conf...

CVE-2018-6261

NVIDIA GeForce Experience vulnerability CVE-2018-6261 affects GeForce Experience prior to 3.15 when GameStream is enabled. The issue involves improper file permissions set on a file, which may allow code execution, denial of service, or privilege escalation by users with system access. Affected p...

CVE-2018-6262

Summary of CVE-2018-6262 (NVIDIA GeForce Experience): The vulnerability affects GeForce Experience prior to version 3.15 when GameStream is enabled, allowing limited sensitive user information to be available to users with system access (information disclosure). Root cause described across connec...

CVE-2018-6259

CVE-2018-6259 affects NVIDIA GeForce Experience prior to 3.14.1, with a vulnerability that can enable limited information disclosure when GameStream is enabled and an attacker has system access alongside certain system features. The consolidated sources (NVD entry, NVIDIA security bulletin, and L...

CVE-2018-6258

CVE-2018-6258 affects NVIDIA GeForce Experience prior to 3.14.1. The vulnerability occurs during GameStream installation when an attacker with system access can perform a Man-in-the-Middle (MitM) attack to obtain sensitive information. Related Lenovo and NVIDIA advisories corroborate that multipl...

CVE-2018-6263

CVE-2018-6263 concerns NVIDIA GeForce Experience prior to version 3.16 on Windows. The issue allows a local user to plant a malicious DLL during application installation, enabling privilege escalation. The NVIDIA Security Bulletin (and CNVD/CVE records) confirm the affected product and the local-...

CVE-2018-6265

CVE-2018-6265 affects NVIDIA GeForce Experience prior to 3.16. The vulnerability occurs during Windows 7 application installation in elevated privilege mode, where a local user initiating a browser session may obtain escalation of privileges on the browser. Publicly documented details identify th...

CVE-2018-6266

CVE-2018-6266 refers to a local-info-disclosure vulnerability in NVIDIA GeForce Experience prior to version 3.16 on Windows, where a local user can obtain third party integration parameters. The issue is confirmed in multiple connected sources (e.g., NVIDIA security bulletin, Lenovo advisory) des...