7.8

CVE-2020-5964

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nvidia ≫ Quadro Firmware Version >= 390 < 392.61
   Nvidia ≫ Quadro Version -
Nvidia ≫ Quadro Firmware Version >= 418 < 426.78
   Nvidia ≫ Quadro Version -
Nvidia ≫ Quadro Firmware Version >= 440 < 443.18
   Nvidia ≫ Quadro Version -
Nvidia ≫ Quadro Firmware Version >= 450 < 451.48
   Nvidia ≫ Quadro Version -
Nvidia ≫ Tesla Firmware Version >= 418 < 426.78
   Nvidia ≫ Tesla Version -
Nvidia ≫ Tesla Firmware Version >= 440 < 443.18
   Nvidia ≫ Tesla Version -
Nvidia ≫ Tesla Firmware Version >= 450 < 451.48
   Nvidia ≫ Tesla Version -
Nvidia ≫ Geforce Experience Version < 3.20.4
   Microsoft ≫ Windows Version -
Nvidia ≫ Nvs Firmware Version >= 390 < 392.61
   Nvidia ≫ Nvs Version -
Nvidia ≫ Nvs Firmware Version >= 418 < 426.78
   Nvidia ≫ Nvs Version -
Nvidia ≫ Nvs Firmware Version >= 440 < 443.18
   Nvidia ≫ Nvs Version -
Nvidia ≫ Nvs Firmware Version >= 450 < 451.48
   Nvidia ≫ Nvs Version -
Nvidia ≫ Geforce Firmware Version >= 450 < 451.48
   Nvidia ≫ Geforce Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.33% 0.247
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-345 Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

https://nvidia.custhelp.com/app/answers/detail/a_id/5031
Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5038
Vendor Advisory