Vulnerabilities > Nvidia > Geforce Experience > High

DATE CVE VULNERABILITY TITLE RISK
2020-03-05 CVE-2020-5957 Unspecified vulnerability in Nvidia Geforce Experience, Quadro Firmware and Tesla Firmware
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges.
local
low complexity
nvidia
7.8
2019-12-24 CVE-2019-5702 Unspecified vulnerability in Nvidia Geforce Experience
NVIDIA GeForce Experience, all versions prior to 3.20.2, contains a vulnerability when GameStream is enabled in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges.
local
low complexity
nvidia
7.8
2019-11-09 CVE-2019-5701 Uncontrolled Search Path Element vulnerability in Nvidia Geforce Experience
NVIDIA GeForce Experience, all versions prior to 3.20.0.118, contains a vulnerability when GameStream is enabled in which an attacker with local system access can load the Intel graphics driver DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), which may lead to denial of service, information disclosure, or escalation of privileges through code execution.
local
low complexity
nvidia CWE-427
7.8
2019-11-09 CVE-2019-5689 Unspecified vulnerability in Nvidia Geforce Experience
NVIDIA GeForce Experience, all versions prior to 3.20.1, contains a vulnerability in the Downloader component in which a user with local system access can craft input that may allow malicious files to be downloaded and saved.
local
low complexity
nvidia
7.8
2019-05-31 CVE-2019-5678 Improper Input Validation vulnerability in Nvidia Geforce Experience
NVIDIA GeForce Experience versions prior to 3.19 contains a vulnerability in the Web Helper component, in which an attacker with local system access can craft input that may not be properly validated.
local
low complexity
nvidia CWE-20
7.8
2019-03-28 CVE-2019-5674 Link Following vulnerability in Nvidia Geforce Experience
NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled.
local
high complexity
nvidia CWE-59
7.0
2018-11-27 CVE-2018-6265 Unspecified vulnerability in Nvidia Geforce Experience
NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 during application installation on Windows 7 in elevated privilege mode, where a local user who initiates a browser session may obtain escalation of privileges on the browser.
local
low complexity
nvidia
7.8
2018-11-27 CVE-2018-6263 Unspecified vulnerability in Nvidia Geforce Experience
NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows in which an attacker who has access to a local user account can plant a malicious dynamic link library (DLL) during application installation, which may lead to escalation of privileges.
local
low complexity
nvidia
7.8
2018-10-02 CVE-2018-6261 Incorrect Permission Assignment for Critical Resource vulnerability in Nvidia Geforce Experience
NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled which sets incorrect permissions on a file, which may to code execution, denial of service, or escalation of privileges by users with system access.
local
high complexity
nvidia CWE-732
7.0
2018-08-31 CVE-2018-6257 Unspecified vulnerability in Nvidia Geforce Experience
NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled where improper access control may lead to a denial of service, escalation of privileges, or both.
local
high complexity
nvidia
7.0