Privilege Escalation Vulnerability in NVIDIA Control Panel for Windows
CVE-2022-34672
7.8HIGH
Key Information:
- Vendor
- Nvidia
- Vendor
- CVE Published:
- 30 December 2022
Summary
A vulnerability in the NVIDIA Control Panel for Windows allows unauthorized or unprivileged users to compromise the security of the software. This flaw can lead to unauthorized privilege escalation, enabling attackers to gain access to sensitive information or execute commands without sufficient permissions.
Affected Version(s)
vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver) All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved