Privilege Escalation and Denial of Service Vulnerability in NVIDIA GeForce Experience
CVE-2020-5978

7.8HIGH

Key Information:

Vendor

Nvidia
Status
Nvidia Geforce Experience Software
Vendor
CVE Published:
23 October 2020

What is CVE-2020-5978?

NVIDIA GeForce Experience versions prior to 3.20.5.70 are affected by a vulnerability wherein a folder is created by the nvcontainer.exe service under normal user login with LOCAL_SYSTEM privileges. This flaw can lead to a denial of service or unauthorized escalation of privileges, potentially allowing an attacker to manipulate system resources and compromise user security.

Affected Version(s)

NVIDIA GeForce Experience Software All versions prior to 3.20.5.70

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5076
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.