Improper Access Control in NVIDIA GeForce Experience Versions
CVE-2018-6257

7HIGH

Key Information:

Vendor
Nvidia
Status
Nvidia Geforce Experience
Vendor
CVE Published:
30 August 2018

Summary

NVIDIA GeForce Experience, up to version 3.14.1, is susceptible to a vulnerability when GameStream is enabled. This flaw allows for improper access control, which could potentially lead to a denial of service or unauthorized privilege escalation. Users with earlier versions may face risks associated with malicious exploitation leveraging this vulnerability.

Affected Version(s)

NVIDIA GeForce Experience All versions prior to 3.14.1

References

https://nvidia.custhelp.com/app/answers/detail/a_id/4685
x_refsource_CONFIRM

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.