GE
Product
Geforce Experience
37
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 26Medium 8Low 2
Watch
Add Geforce Experience to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-14491 | 9.8 | Oct 4 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response Affected: 3.0 before 3.10.0.55 |
| CVE-2017-6250 | 8.8 | Apr 28 | NVIDIA GeForce Experience contains a vulnerability in NVIDIA Web Helper.exe, where untrusted script execution may lead to violation of application execution policy and local code… Affected: through gfe_3.6.0.74 |
| CVE-2016-8812 | 8.8 | Nov 8 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnerability in the kernel mode… Affected: through - |
| CVE-2021-1073 | 8.3 | Jun 25 | NVIDIA GeForce Experience, all versions prior to 3.23, contains a vulnerability in the login flow when a user tries to log in by using a browser, while, at the same time, any… Affected: before 3.23 |
| CVE-2021-23175 | 8.2 | Dec 23 | NVIDIA GeForce Experience contains a vulnerability in user authorization, where GameStream does not correctly apply individual user access controls for users on the same device,… Affected: before 3.24.0.126 |
| CVE-2022-42292 | 7.8 | Feb 12 | NVIDIA GeForce Experience contains a vulnerability in the NVContainer component, where a user without administrator privileges can create a symbolic link to a file that requires… Affected: before 3.27.0.112 |
| CVE-2020-5990 | 7.8 | Oct 23 | NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in the ShadowPlay component which may lead to local privilege escalation, code execution,… Affected: before 3.20.5.70 |
| CVE-2020-5978 | 7.8 | Oct 23 | NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in its services in which a folder is created by nvcontainer.exe under normal user login with… Affected: before 3.20.5.70 |
| CVE-2020-5977 | 7.8 | Oct 23 | NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a… Affected: before 3.20.5.70 |
| CVE-2020-5964 | 7.8 | Jun 25 | NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed Affected: before 3.20.4 |
| CVE-2020-5958 | 7.8 | Mar 11 | NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can plant a malicious… Affected: 440 before 442.50 |
| CVE-2020-5957 | 7.8 | Mar 5 | NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system… Affected: 440 before 442.50 |
| CVE-2019-5702 | 7.8 | Dec 24 | NVIDIA GeForce Experience, all versions prior to 3.20.2, contains a vulnerability when GameStream is enabled in which an attacker with local system access can corrupt a system… Affected: before 3.20.2 |
| CVE-2019-5701 | 7.8 | Nov 9 | NVIDIA GeForce Experience, all versions prior to 3.20.0.118, contains a vulnerability when GameStream is enabled in which an attacker with local system access can load the Intel… Affected: before 3.20.0.118 |
| CVE-2019-5689 | 7.8 | Nov 9 | NVIDIA GeForce Experience, all versions prior to 3.20.1, contains a vulnerability in the Downloader component in which a user with local system access can craft input that may… Affected: before 3.20.1 |
| CVE-2019-5678 | 7.8 | May 31 | NVIDIA GeForce Experience versions prior to 3.19 contains a vulnerability in the Web Helper component, in which an attacker with local system access can craft input that may not… Affected: before 3.19 |
| CVE-2018-6265 | 7.8 | Nov 27 | NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 during application installation on Windows 7 in elevated privilege mode, where a local user who… Affected: before 3.16 |
| CVE-2018-6263 | 7.8 | Nov 27 | NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows in which an attacker who has access to a local user account can plant a malicious… Affected: before 3.16 |
| CVE-2017-0316 | 7.8 | Oct 16 | In GeForce Experience (GFE) 3.x before 3.10.0.55, NVIDIA Installer Framework contains a vulnerability in NVISystemService64 where a value passed from a user to the driver is used… Affected: 3.0 before 3.10.0.55 |
| CVE-2016-5852 | 7.8 | Nov 8 | For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in… Affected: through - |
| CVE-2016-3161 | 7.8 | Nov 8 | For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in… Affected: through - |
| CVE-2022-31611 | 7.3 | Feb 7 | NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may cause the installer to… Affected: before 3.27.0.112 |
| CVE-2016-4960 | 7.3 | Nov 8 | For the NVIDIA Quadro, NVS, and GeForce products, the NVIDIA NVStreamKMS.sys service component is improperly validating user-supplied data through its API entry points causing an… Affected: All versions, or not specified |
| CVE-2021-1072 | 7.1 | Feb 5 | NVIDIA GeForce Experience, all versions prior to 3.21, contains a vulnerability in GameStream (rxdiag.dll) where an arbitrary file deletion due to improper handling of log files… Affected: before 3.21 |
| CVE-2019-5674 | 7.0 | Mar 28 | NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled Affected: before 3.18 |
| CVE-2018-6261 | 7.0 | Oct 2 | NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled which sets incorrect permissions on a file, which may to code execution, denial of… Affected: before 3.15 |
| CVE-2018-6257 | 7.0 | Aug 31 | NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled where improper access control may lead to a denial of service,… Affected: 3.0.0 before 3.14.1 |
| CVE-2019-5676 | 6.7 | May 10 | NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or… Affected: before 3.19 |
| CVE-2019-5695 | 6.5 | Nov 12 | NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in the local service provider component in which an attacker… Affected: before 3.20.1 |
| CVE-2016-8827 | 6.5 | Dec 16 | NVIDIA GeForce Experience 3.x before GFE 3.1.0.52 contains a vulnerability in NVIDIA Web Helper.exe where a local web API endpoint, /VisualOPS/v.1.0./, lacks proper access control… Affected: 3.0 before 3.1.0.52 |
| CVE-2021-1079 | 6.1 | Apr 20 | NVIDIA GeForce Experience, all versions prior to 3.22, contains a vulnerability in GameStream plugins where log files are created using NT/System level permissions, which may lead… Affected: before 3.22 |
| CVE-2022-42291 | 5.5 | Feb 7 | NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently delete data from a linked… Affected: before 3.27.0.112 |
| CVE-2018-6266 | 5.5 | Nov 27 | NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows where a local user may obtain third party integration parameters, which may lead to… Affected: before 3.16 |
| CVE-2016-4961 | 5.5 | Nov 8 | For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVStreamKMS.sys API layer caused a denial of service vulnerability (blue screen crash)… Affected: through - |
| CVE-2018-6258 | 4.7 | Aug 31 | NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability during GameStream installation where an attacker who has system access can potentially… Affected: 3.0.0 before 3.14.1 |
| CVE-2018-6262 | 2.5 | Oct 2 | NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled where limited sensitive user information may be available to users with system access,… Affected: before 3.15 |
| CVE-2018-6259 | 2.5 | Aug 31 | NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled, an attacker has system access, and certain system features… Affected: 3.0.0 before 3.14.1 |
Showing 37