CVE-2016-8827: Path Traversal
NVIDIA GeForce Experience 3.x before GFE 3.1.0.52 contains a vulnerability in NVIDIA Web Helper.exe where a local web API endpoint, /VisualOPS/v.1.0./, lacks proper access control and parameter validation, allowing for information disclosure via a directory traversal attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8827?
CVE-2016-8827 has a medium severity rating due to improper access control that can lead to information disclosure.
How do I fix CVE-2016-8827?
To fix CVE-2016-8827, upgrade to NVIDIA GeForce Experience version 3.1.0.52 or later.
What happens if I am affected by CVE-2016-8827?
If affected by CVE-2016-8827, a local attacker could exploit the vulnerability to disclose sensitive information.
Is there a workaround for CVE-2016-8827?
There is no official workaround for CVE-2016-8827 other than upgrading to the fixed version.
Which software versions are affected by CVE-2016-8827?
CVE-2016-8827 affects NVIDIA GeForce Experience versions 3.0 and earlier.