Nvidia Corporation Geforce Experience vulnerabilities
9 vulnerabilities
Known vulnerabilities in Nvidia Corporation Geforce Experience, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-6263nvidia corporationgeforce experience+1
EPSS score0.31%
NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows in which an attacker who has access to a local user account can plant a malicious dynamic link library (DLL) during application installation, which may lead to escalation of privileges.CVE-2018-6262nvidia corporationgeforce experience+1EPSS score0.24%
NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled where limited sensitive user information may be available to users with system access, which may lead to information disclosure.CVE-2018-6261nvidia corporationgeforce experience+1EPSS score0.29%
NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled which sets incorrect permissions on a file, which may to code execution, denial of service, or escalation of privileges by users with system access.CVE-2018-6266nvidia corporationgeforce experience+1EPSS score0.31%
NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows where a local user may obtain third party integration parameters, which may lead to information disclosure.CVE-2018-6265nvidia corporationgeforce experience+1EPSS score0.31%
NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 during application installation on Windows 7 in elevated privilege mode, where a local user who initiates a browser session may obtain escalation of privileges on the browser.CVE-2016-8827nvidia corporationgeforce experience+1EPSS score5.32%
NVIDIA GeForce Experience 3.x before GFE 3.1.0.52 contains a vulnerability in NVIDIA Web Helper.exe where a local web API endpoint, /VisualOPS/v.1.0./, lacks proper access control and parameter validation, allowing for information disclosure via a directory traversal attack.CVE-2017-0316nvidia corporationgeforce experience+1EPSS score0.29%
In GeForce Experience (GFE) 3.x before 3.10.0.55, NVIDIA Installer Framework contains a vulnerability in NVISystemService64 where a value passed from a user to the driver is used without validation, which may lead to denial of service or possible escalation of privileges.CVE-2017-6250nvidia corporationgeforce experience+1EPSS score0.35%
NVIDIA GeForce Experience contains a vulnerability in NVIDIA Web Helper.exe, where untrusted script execution may lead to violation of application execution policy and local code execution.CVE-2019-5674nvidia corporationgeforce experience+1EPSS score1.16%
NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of service, or escalation of privileges.