What is CVE-2021-23175?

CVE-2021-23175 is a vulnerability in NVIDIA GeForce Experience that allows for escalation of privileges, information disclosure, data tampering, and denial of service.

How does CVE-2021-23175 impact users?

CVE-2021-23175 can potentially allow unauthorized users to gain elevated privileges, access sensitive information, manipulate data, and disrupt the normal operation of the affected system.

What software is affected by CVE-2021-23175?

NVIDIA GeForce Experience versions up to 3.24.0.126 are affected by CVE-2021-23175.

How can the vulnerability in NVIDIA GeForce Experience be fixed?

To mitigate CVE-2021-23175, it is recommended to update NVIDIA GeForce Experience to a version beyond 3.24.0.126, as this vulnerability has been patched in later releases.

Where can I find more information about CVE-2021-23175?

You can find more information about CVE-2021-23175 and its impact on the NVIDIA GeForce Experience in the official NVIDIA security advisory: https://nvidia.custhelp.com/app/answers/detail/a_id/5295

Vulnerability/
CVE-2021-23175

high

8.2

CWE

863

23/12/2021

3/8/2024

CVE-2021-23175

First published: Thu Dec 23 2021(Updated: )

NVIDIA GeForce Experience contains a vulnerability in user authorization, where GameStream does not correctly apply individual user access controls for users on the same device, which, with user intervention, may lead to escalation of privileges, information disclosure, data tampering, and denial of service, affecting other resources beyond the intended security authority of GameStream.

Credit: psirt@nvidia.com

Affected Software	Affected Version	How to fix
NVIDIA GeForce Experience	<3.24.0.126
Microsoft Windows

Never miss a vulnerability like this again

Reference Links

https://nvidia.custhelp.com/app/answers/detail/a_id/5295

Frequently Asked Questions

What is CVE-2021-23175?
CVE-2021-23175 is a vulnerability in NVIDIA GeForce Experience that allows for escalation of privileges, information disclosure, data tampering, and denial of service.
How does CVE-2021-23175 impact users?
CVE-2021-23175 can potentially allow unauthorized users to gain elevated privileges, access sensitive information, manipulate data, and disrupt the normal operation of the affected system.
What software is affected by CVE-2021-23175?
NVIDIA GeForce Experience versions up to 3.24.0.126 are affected by CVE-2021-23175.
How can the vulnerability in NVIDIA GeForce Experience be fixed?
To mitigate CVE-2021-23175, it is recommended to update NVIDIA GeForce Experience to a version beyond 3.24.0.126, as this vulnerability has been patched in later releases.
Where can I find more information about CVE-2021-23175?
You can find more information about CVE-2021-23175 and its impact on the NVIDIA GeForce Experience in the official NVIDIA security advisory: https://nvidia.custhelp.com/app/answers/detail/a_id/5295

collector/nvd-index
agent/author
agent/severity
agent/references
agent/weakness
agent/description
agent/type
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
agent/event
agent/tags
collector/mitre-cve
source/MITRE
vendor/nvidia
canonical/nvidia geforce experience
vendor/microsoft
canonical/microsoft windows

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.