Vulnerabilities > Nvidia > Geforce 920Mx

DATE CVE VULNERABILITY TITLE RISK
2016-11-08 CVE-2016-8812 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Nvidia Geforce Experience
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnerability in the kernel mode layer (nvstreamkms.sys) allowing a user to cause a stack buffer overflow with specially crafted executable paths, leading to a denial of service or escalation of privileges.
local
low complexity
nvidia CWE-119
7.2
2016-11-08 CVE-2016-7382 Permission Issues vulnerability in Nvidia GPU Driver
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
local
low complexity
nvidia CWE-275
7.2
2016-11-08 CVE-2016-5852 Local Privilege Escalation and Denial of Service vulnerability in Multiple NVIDIA Products
For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows.
local
low complexity
nvidia
7.2
2016-11-08 CVE-2016-5025 Improper Input Validation vulnerability in Nvidia GPU Driver
For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVAPI support layer causes a denial of service vulnerability (blue screen crash) within the NVIDIA Windows graphics drivers.
local
low complexity
nvidia CWE-20
6.1
2016-11-08 CVE-2016-4961 Improper Input Validation vulnerability in Nvidia Geforce Experience
For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVStreamKMS.sys API layer caused a denial of service vulnerability (blue screen crash) within the NVIDIA Windows graphics drivers.
local
low complexity
nvidia CWE-20
4.9
2016-11-08 CVE-2016-4960 Improper Input Validation vulnerability in Nvidia Geforce Experience
For the NVIDIA Quadro, NVS, and GeForce products, the NVIDIA NVStreamKMS.sys service component is improperly validating user-supplied data through its API entry points causing an elevation of privilege.
local
nvidia CWE-20
6.9
2016-11-08 CVE-2016-4959 NULL Pointer Dereference vulnerability in Nvidia GPU Driver
For the NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service.
network
low complexity
nvidia CWE-476
7.8
2016-11-08 CVE-2016-3161 Local Privilege Escalation and Denial of Service vulnerability in Multiple NVIDIA Products
For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows.
local
low complexity
nvidia
7.2