CVE
CVE-2023-31016

7.3HIGH

Key Information:

Vendor
Nvidia
Status
Nvidia Gpu Display Driver, Vgpu Driver, And Cloud Gaming Driver
Vendor
CVE Published:
2 November 2023

Summary

The NVIDIA GPU Display Driver for Windows contains a vulnerability stemming from an uncontrolled search path element. This may permit an attacker to execute arbitrary code, potentially leading to severe impacts such as denial of service, escalation of privileges, information disclosure, or unauthorized data manipulation. Users are encouraged to be aware of potential risks and ensure that their systems are updated to mitigate this vulnerability.

Affected Version(s)

NVIDIA GPU Display driver, vGPU driver, and Cloud gaming driver All versions prior to and including 13.8, 15.3, 16.1 and all versions prior to and including September 2023 release

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5491

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.