Low severity · published Dec 30, 2022
CVE-2022-42266
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can cause…
3.3
CVSS
0.2%
EPSS
No
On KEV
Description
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can cause exposure of sensitive information to an actor that is not explicitly authorized to have access to that information, which may lead to limited information disclosure.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CG
Cloud Gaming · Nvidia
before 527.27 · source: NVD
VG
Virtual Gpu · Nvidia
before 11.11; 13.0 before 13.6; 14.0 before 14.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-42266
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-42266
Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5415
More from Cloud Gaming
7.8
CVE-2024-0107
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read
7.8
CVE-2024-0091
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API
7.8
CVE-2024-0090
NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write
7.8
CVE-2024-0089
NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed
7.8
CVE-2024-0085
NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host