CVE-2016-8824: High severity nvidia gpu kernel driver vulnerability

Published Dec 16, 2016

Updated

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where improper access controls allow a regular user to write a part of the registry intended for privileged users only, leading to escalation of privileges.

Affected Software

2 affected components

Nvidia GPU driver

Microsoft Windows

Remediation

Patch Available

http://nvidia.custhelp.com/app/answers/detail/a_id/4278

Event History

Dec 16, 2016

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-8824?

CVE-2016-8824 is classified as a high severity vulnerability due to its potential for privilege escalation.

How do I fix CVE-2016-8824?

To fix CVE-2016-8824, update to the latest version of the NVIDIA GPU Display Driver that addresses the vulnerability.

What systems are affected by CVE-2016-8824?

CVE-2016-8824 affects all versions of NVIDIA Windows GPU Display Driver.

What type of vulnerability is CVE-2016-8824?

CVE-2016-8824 is a privilege escalation vulnerability within the kernel mode layer of the NVIDIA driver.

Who can exploit CVE-2016-8824?

CVE-2016-8824 can be exploited by regular users on the system to gain unauthorized access to resources meant for privileged users.