Downloader Vulnerability in NVIDIA GeForce Experience
CVE-2019-5689

7.8HIGH

Key Information:

Vendor
Nvidia
Status
Nvidia Geforce Experience
Vendor
CVE Published:
9 November 2019

Summary

The NVIDIA GeForce Experience software is vulnerable due to the Downloader component, allowing users with local system access to craft input that can lead to the download and saving of malicious files. This flaw enables potential code execution, denial of service, and unauthorized information disclosure, posing serious security risks for affected systems.

Affected Version(s)

NVIDIA GeForce Experience All versions prior to 3.20.1

References

https://nvidia.custhelp.com/app/answers/detail/a_id/4860
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.