First published: Wed Nov 11 2020(Updated: )
NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its open-source software dependency in which the OpenSSL library is vulnerable to binary planting attacks by a local user, which may lead to code execution or escalation of privileges.
Credit: psirt@nvidia.com
Affected Software | Affected Version | How to fix |
---|---|---|
NVIDIA GeForce Now | <2.0.25.119 | |
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this NVIDIA GeForce NOW vulnerability is CVE-2020-5992.
The severity level of CVE-2020-5992 is high with a score of 7.8.
All versions of NVIDIA GeForce NOW application software on Windows prior to 2.0.25.119 are affected by CVE-2020-5992.
This vulnerability in NVIDIA GeForce NOW could lead to code execution or escalation of privileges if exploited by a local user.
No, Microsoft Windows is not affected by CVE-2020-5992.
To fix the CVE-2020-5992 vulnerability, users should update their NVIDIA GeForce NOW application software on Windows to version 2.0.25.119 or later.
More information about CVE-2020-5992 can be found on the NVIDIA customer help website.