Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Nvidia Treiber ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen, Informationen offenzulegen, oder Dateien zu manipulieren.
Product
NVidia ist ein Hersteller von Grafikkarten.
Vulnerabilities 9
-
High 7.8
CVE
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of…
-
High 7.8
CVE
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer when the driver is performing an operation at a privilege level that is higher than the minimum level required. A successful exploit of this vulnerability may lead to code…
-
High 7.8
CVE
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, where it allows a guest OS to allocate resources for which the guest OS is not authorized. A successful exploit of this vulnerability may lead to code execution, denial of service, escala…
-
High 7.1
CVE
NVIDIA GPU Display Driver for Linux contains a vulnerability where an attacker may access a memory location after the end of the buffer. A successful exploit of this vulnerability may lead to denial of service and data tampering.
-
Medium 6.5
CVE
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user in a guest can cause a NULL-pointer dereference in the host, which may lead to denial of service.
-
Medium 6.5
CVE
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user in a guest VM can cause a NULL-pointer dereference in the host. A successful exploit of this vulnerability may lead to denial of service.
-
Medium 6.1
CVE
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user may cause a NULL-pointer dereference by accessing passed parameters the validity of which has not been checked. A successful exploit of this vulnerability may lead to denial…
-
Medium 5.3
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer ove…
-
Medium 4.8
Simple Basic Contact Form < 20221201 - Admin+ Stored XSS
The Simple Basic Contact Form WordPress plugin before 20221201 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is d…
Revision history
-
#7
Neue Updates von Debian aufgenommen
-
#6
Neue Updates von Dell aufgenommen
-
#5
Neue Updates von HP aufgenommen
-
#4
Neue Updates von LENOVO aufgenommen
-
#3
Neue Updates von SUSE aufgenommen
-
#2
Neue Updates von XEROX aufgenommen
-
#1
Initiale Fassung
References
-
NVIDIA Security Bulletin vom 2024-02-28
https://nvidia.custhelp.com/app/answers/detail/a_id/5520
-
XEROX Security Advisory XRX24-005 vom 2024-03-04
https://security.business.xerox.com/wp-content/uploads/2024/03/Xerox-Security-Bulletin-XRX24-005-Xerox-FreeFlow%C2%AE-Print-Server-v9_Feb-2024.pdf
-
SUSE Security Update SUSE-SU-2024:0772-1 vom 2024-03-05
https://lists.suse.com/pipermail/sle-security-updates/2024-March/018095.html
-
SUSE Security Update SUSE-SU-2024:0770-1 vom 2024-03-05
https://lists.suse.com/pipermail/sle-security-updates/2024-March/018097.html
-
Lenovo Security Advisory LEN-150808 vom 2024-03-13
https://support.lenovo.com/us/en/product_security/LEN-150808
-
HP Security Bulletin HPSBHF03923 vom 2024-03-08
https://support.hp.com/de-de/document/ish_10287205-10294675-16/HPSBHF03923
-
Dell Security Advisory DSA-2024-045 vom 2024-05-14
https://www.dell.com/support/kbdoc/de-de/000222538/dsa-2024-045-security-update-for-dell-client-platform-for-multiple-nvidia-gpu-display-driver-vulnerabilities
-
Debian Security Advisory DLA-4752 vom 2026-08-24
https://lists.debian.org/debian-lts-announce/2026/08/msg00044.html