NVIDIA GeForce Experience User Authorization Vulnerability
CVE-2021-23175
8.2HIGH
Key Information:
- Vendor
Nvidia
- Vendor
- CVE Published:
- 23 December 2021
What is CVE-2021-23175?
NVIDIA GeForce Experience suffers from a vulnerability in its user authorization mechanisms. The GameStream feature inadequately enforces individual user access controls, which may allow users on the same device, with the right circumstances, to escalate their privileges. This could lead to unauthorized access to sensitive information, data tampering, or even denial of service, thereby affecting resources beyond the intended security scope of GameStream.
Affected Version(s)
NVIDIA GeForce Experience Software All versions prior to 3.24.0.126