7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%
The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343
before 345.20, and R346 before 347.52 does not properly validate local
client impersonation levels when performing a “kernel administrator check,”
which allows local users to gain administrator privileges via unspecified
API calls.
Author | Note |
---|---|
seth-arnold | appears to be windows-specific |