Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Nvidia Treiber ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen, seine Privilegien zu erweitern und Daten zu manipulieren.
Product
NVidia ist ein Hersteller von Grafikkarten.
Vulnerabilities 10
-
High 8.2
CVE
NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege to escalate privileges when an administrator is updating GPU drivers, which may lead to escalation of privileges.
-
High 7.8
CVE
NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write arbitrary data to privileged locations by using reparse points. A successful exploit of this vulnerability may lead to code execution, denial of service, esc…
-
High 7.8
CVE
NVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver implementation does not restrict or incorrectly restricts access from the named pipe server to a connecting client, which may lead to potential impersonat…
-
High 7.3
CVE
NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or…
-
Medium 6.5
CVE
NVIDIA GPU Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a NULL-pointer dereference, which may lead to denial of service.
-
Medium 6.1
CVE
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause improper access control, which may lead to denial of service or data tampering.
-
Medium 6.0
CVE
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a NULL-pointer dereference may lead to denial of service.
-
Medium 5.5
CVE
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a malicious user in the guest VM can cause a NULL-pointer dereference, which may lead to denial of service.
-
Medium 5.5
CVE
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a NULL-pointer dereference may lead to denial of service.
-
Medium 5.5
CVE
NVIDIA Display Driver for Windows contains a vulnerability where an attacker may cause a pointer dereference of an untrusted value, which may lead to denial of service.
Revision history
-
#7
Neue Updates von Debian aufgenommen
-
#6
Neue Updates von Gentoo aufgenommen
-
#5
Neue Updates von HP aufgenommen
-
#4
Neue Updates von LENOVO aufgenommen
-
#3
Neue Updates von SUSE aufgenommen
-
#2
Neue Updates von Dell aufgenommen
-
#1
Initiale Fassung
References
-
NVIDIA GPU Display Driver Security Bulletin vom 2023-10-31
https://nvidia.custhelp.com/app/answers/detail/a_id/5491
-
Dell Security Advisory DSA-2023-383 vom 2023-11-13
https://www.dell.com/support/kbdoc/de-de/000219322/dsa-2023-383-security-update-for-dell-client-platform-nvidia-gpu-display-driver-vulnerabilities
-
SUSE Security Update SUSE-SU-2023:4427-1 vom 2023-11-13
https://lists.suse.com/pipermail/sle-security-updates/2023-November/017020.html
-
SUSE Security Update SUSE-SU-2023:4429-1 vom 2023-11-13
https://lists.suse.com/pipermail/sle-security-updates/2023-November/017028.html
-
Lenovo Security Advisory LEN-144841 vom 2023-11-14
https://support.lenovo.com/us/en/product_security/ps500588-nvidia-gpu-display-driver-advisory-october-2023
-
HP Security Bulletin HPSBHF03903 vom 2024-01-08
https://support.hp.com/de-de/document/ish_9956631-9957749-16/HPSBHF03903
-
Gentoo Linux Security Advisory GLSA-202405-28 vom 2024-05-08
https://security.gentoo.org/glsa/202405-28
-
Debian Security Advisory DLA-4752 vom 2026-08-24
https://lists.debian.org/debian-lts-announce/2026/08/msg00044.html