First published: Fri Dec 30 2022(Updated: )
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can access or modify system files or other files that are critical to the application, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.
Credit: psirt@nvidia.com
Affected Software | Affected Version | How to fix |
---|---|---|
NVIDIA Virtual GPU | <11.11 | |
NVIDIA Virtual GPU | >=13.0<13.6 | |
NVIDIA Virtual GPU | >=14.0<14.4 | |
Microsoft Windows | ||
Nvidia Cloud Gaming | <527.27 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-34669 is a vulnerability in the NVIDIA GPU Display Driver for Windows that allows an unprivileged regular user to access or modify critical system files, leading to potential code execution, denial of service, privilege escalation, or information disclosure.
CVE-2022-34669 impacts NVIDIA Virtual GPU versions 11.11, 13.0 to 13.6, and 14.0 to 14.4, allowing unprivileged regular users to access or modify critical system files.
No, Microsoft Windows is not vulnerable to CVE-2022-34669.
The severity of CVE-2022-34669 is rated as high with a score of 7.8.
To fix CVE-2022-34669, it is recommended to update NVIDIA GPU Display Driver for Windows to the latest version provided by NVIDIA.