Information Disclosure Vulnerability in NVIDIA GeForce NOW Desktop Application
CVE-2020-5975

7.5HIGH

Key Information:

Vendor

Nvidia
Status
Nvidia Geforce Now Application
Vendor
CVE Published:
18 September 2020

What is CVE-2020-5975?

NVIDIA GeForce NOW for Windows and macOS prior to version 2.0.23 contains a vulnerability that exposes sensitive user information through URL parameters. This flaw in the desktop application software may allow unauthorized access to confidential data, facilitating potential information breaches. Users are advised to update to the latest version to mitigate this risk.

Affected Version(s)

NVIDIA GeForce NOW Application All versions prior to 2.0.23 (applicable to Windows, macOS)

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5052
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.