5.5
CVE-2022-42266
- EPSS 0.09%
- Published 30.12.2022 23:15:11
- Last modified 21.11.2024 07:24:37
- Source psirt@nvidia.com
- Teams watchlist Login
- Open Login
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can cause exposure of sensitive information to an actor that is not explicitly authorized to have access to that information, which may lead to limited information disclosure.
Data is provided by the National Vulnerability Database (NVD)
Nvidia ≫ Virtual Gpu Version < 11.11
Nvidia ≫ Virtual Gpu Version >= 13.0 < 13.6
Nvidia ≫ Virtual Gpu Version >= 14.0 < 14.4
Nvidia ≫ Cloud Gaming Version < 527.27
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.09% | 0.266 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 3.3 | 1.8 | 1.4 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
| psirt@nvidia.com | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.