First published: Fri Dec 30 2022(Updated: )
NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can compromise the security of the software by gaining privileges, reading sensitive information, or executing commands.
Credit: psirt@nvidia.com
Affected Software | Affected Version | How to fix |
---|---|---|
NVIDIA Virtual GPU | <11.11 | |
NVIDIA Virtual GPU | >=13.0<13.6 | |
NVIDIA Virtual GPU | >=14.0<14.4 | |
Microsoft Windows | ||
Nvidia Cloud Gaming | <527.27 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-34672 is a vulnerability in the NVIDIA Control Panel for Windows that allows an unauthorized user or an unprivileged regular user to gain privileges, read sensitive information, or execute commands.
CVE-2022-34672 affects NVIDIA Virtual GPU versions 11.11 to 14.4, allowing unauthorized users or unprivileged regular users to compromise the security of the software.
No, Microsoft Windows is not affected by CVE-2022-34672.
CVE-2022-34672 has a severity rating of 7.8 (High).
To fix CVE-2022-34672, update NVIDIA Virtual GPU to a version beyond 14.4 or apply any patches or updates provided by NVIDIA.