CVE-2019-5695: Medium severity nvidia geforce experience vulnerability
NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), which may lead to denial of service or information disclosure through code execution.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-5695?
CVE-2019-5695 is a vulnerability found in NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) that allows an attacker with local system and privileged access to incorrectly load Windows system DLLs without validation.
How severe is CVE-2019-5695?
CVE-2019-5695 has a severity rating of 6.5 (medium).
How can an attacker exploit CVE-2019-5695?
An attacker with local system and privileged access can exploit CVE-2019-5695 by loading Windows system DLLs without proper validation, which could lead to unauthorized access or privilege escalation.
Which software versions are affected by CVE-2019-5695?
NVIDIA GeForce Experience versions prior to 3.20.1 and all versions of Windows GPU Display Driver are affected by CVE-2019-5695.
Is Microsoft Windows vulnerable to CVE-2019-5695?
No, Microsoft Windows is not vulnerable to CVE-2019-5695, but the NVIDIA GeForce Experience and Windows GPU Display Driver are.