Summary
Ein Angreifer kann mehrere Schwachstellen im Nvidia Treiber ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien zu erweitern und Daten zu manipulieren.
Product
NVidia ist ein Hersteller von Grafikkarten.
Vulnerabilities 18
-
High 8.8
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler which may lea…
-
High 8.8
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler which may lead to code ex…
-
High 7.8
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write c…
-
High 7.1
NVIDIA GPU Display Driver for Linux contains a vulnerability in a kernel mode layer handler, which may lead to denial o…
-
High 7.1
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a kernel mode layer handler, where memory p…
-
High 7.1
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an out-of-bounds write can …
-
High 7.1
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out…
-
Medium 6.7
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where sign conversion issuescast…
-
Medium 6.6
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where improper restriction of op…
-
Medium 6.1
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write c…
-
Medium 6.1
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out…
-
Medium 6.1
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out…
-
Medium 5.5
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an unp…
-
Medium 5.5
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a NULL pointer dereference…
-
Medium 5.5
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious user in a guest VM can caus…
-
Medium 4.7
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer handler, where improper privile…
-
Low 2.0
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer driver, where an inva…
-
Low 2.0
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an c…
Revision history
-
#7
Neue Updates von Debian aufgenommen
-
#6
Neue Updates von XEROX aufgenommen
-
#5
Neue Updates von Gentoo aufgenommen
-
#4
Neue Updates von HP aufgenommen
-
#3
Neue Updates von LENOVO aufgenommen
-
#2
Neue Updates von Dell aufgenommen
-
#1
Initiale Fassung
References
-
Security Bulletin: NVIDIA GPU Display Driver - March 2023 vom 2023-03-30
https://nvidia.custhelp.com/app/answers/detail/a_id/5452
-
Dell Security Advisory DSA-2023-092 vom 2023-04-01
https://www.dell.com/support/kbdoc/de-de/000211662/dsa-2023-092
-
Lenovo Security Advisory: LEN-120653
https://support.lenovo.com/us/en/product_security/ps500558-nvidia-display-driver-advisory-march-2023
-
HP Security Bulletin HPSBHF03843 vom 2023-05-09
https://support.hp.com/de-de/document/ish_8094806-8098850-16/HPSBHF03843
-
Gentoo Linux Security Advisory GLSA-202310-02 vom 2023-10-03
https://security.gentoo.org/glsa/202310-02
-
XEROX Security Advisory XRX24-005 vom 2024-03-04
https://security.business.xerox.com/wp-content/uploads/2024/03/Xerox-Security-Bulletin-XRX24-005-Xerox-FreeFlow%C2%AE-Print-Server-v9_Feb-2024.pdf
-
XEROX Security Advisory XRX24-004 vom 2024-03-04
https://security.business.xerox.com/wp-content/uploads/2024/03/Xerox%C2%AE-Security-Bulletin-XRX24-004-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v7.pdf
-
Debian Security Advisory DLA-4752 vom 2026-08-24
https://lists.debian.org/debian-lts-announce/2026/08/msg00044.html