CVE-2023-0192: nvidia vgpu software (virtual gpu manager - citrix hypervisor, vmware vsphere, red hat enterprise linux kvm), nvidia cloud gaming (virtual gpu manager - red hat enterprise linux kvm) Improper Privilege Management

Vulnerability summary

CVE-2023-0192 is a high (CVSS 7.8) Improper Privilege Management vulnerability in nvidia vgpu software (virtual gpu manager - citrix hypervisor, vmware vsphere, red hat enterprise linux kvm), nvidia cloud gaming (virtual gpu manager - red hat enterprise linux kvm). EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 3.1% of scored vulnerabilities.

Timeline

1. 01-04-2023
   PublishedVulnerability first disclosed.
2. 11-02-2025
   Last modifiedVulnerability information updated.

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer handler, where improper privilege management can lead to escalation of privileges and information disclosure.

• CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.