High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-02-12	CVE-2022-42292	Link Following vulnerability in Nvidia Geforce Experience NVIDIA GeForce Experience contains a vulnerability in the NVContainer component, where a user without administrator privileges can create a symbolic link to a file that requires elevated privileges to write to or modify, which may lead to denial of service, escalation of privilege or limited data tampering. local low complexity nvidia CWE-59	7.8
2023-02-07	CVE-2022-31611	Uncontrolled Search Path Element vulnerability in Nvidia Geforce Experience NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may cause the installer to load an arbitrary DLL when the installer is launched. local low complexity nvidia CWE-427	7.3
2019-05-10	CVE-2019-5676	Uncontrolled Search Path Element vulnerability in Nvidia Geforce Experience and GPU Display Driver NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), leading to escalation of privileges through code execution. local low complexity nvidia CWE-427	7.2
2016-11-08	CVE-2016-8812	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Nvidia Geforce Experience For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnerability in the kernel mode layer (nvstreamkms.sys) allowing a user to cause a stack buffer overflow with specially crafted executable paths, leading to a denial of service or escalation of privileges. local low complexity nvidia CWE-119	7.2
2016-11-08	CVE-2016-5852	Local Privilege Escalation and Denial of Service vulnerability in Multiple NVIDIA Products For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. local low complexity nvidia	7.2
2016-11-08	CVE-2016-3161	Local Privilege Escalation and Denial of Service vulnerability in Multiple NVIDIA Products For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. local low complexity nvidia	7.2