What is CVE-2022-42266?

CVE-2022-42266 is a vulnerability in the NVIDIA GPU Display Driver for Windows that allows an unprivileged regular user to expose sensitive information to an unauthorized actor.

What is the severity of CVE-2022-42266?

CVE-2022-42266 has a severity score of 3.3, which is considered medium.

How does CVE-2022-42266 impact NVIDIA Virtual GPU?

CVE-2022-42266 affects NVIDIA Virtual GPU versions up to 11.11 and versions between 13.0 and 13.6, exposing sensitive information to unauthorized actors.

Is Microsoft Windows vulnerable to CVE-2022-42266?

No, Microsoft Windows is not vulnerable to CVE-2022-42266.

Where can I find more information about CVE-2022-42266?

You can find more information about CVE-2022-42266 at the following link: [link](https://nvidia.custhelp.com/app/answers/detail/a_id/5415)

Vulnerability/
CVE-2022-42266

medium

5.5

CWE

200

30/12/2022

3/8/2024

CVE-2022-42266: Infoleak

First published: Fri Dec 30 2022(Updated: )

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can cause exposure of sensitive information to an actor that is not explicitly authorized to have access to that information, which may lead to limited information disclosure.

Credit: psirt@nvidia.com

Affected Software	Affected Version	How to fix
NVIDIA Virtual GPU	<11.11
NVIDIA Virtual GPU	>=13.0<13.6
NVIDIA Virtual GPU	>=14.0<14.4
Microsoft Windows
Nvidia Cloud Gaming	<527.27

Never miss a vulnerability like this again

Reference Links

https://nvidia.custhelp.com/app/answers/detail/a_id/5415

Frequently Asked Questions

What is CVE-2022-42266?
CVE-2022-42266 is a vulnerability in the NVIDIA GPU Display Driver for Windows that allows an unprivileged regular user to expose sensitive information to an unauthorized actor.
What is the severity of CVE-2022-42266?
CVE-2022-42266 has a severity score of 3.3, which is considered medium.
How does CVE-2022-42266 impact NVIDIA Virtual GPU?
CVE-2022-42266 affects NVIDIA Virtual GPU versions up to 11.11 and versions between 13.0 and 13.6, exposing sensitive information to unauthorized actors.
Is Microsoft Windows vulnerable to CVE-2022-42266?
No, Microsoft Windows is not vulnerable to CVE-2022-42266.
Where can I find more information about CVE-2022-42266?
You can find more information about CVE-2022-42266 at the following link: [link](https://nvidia.custhelp.com/app/answers/detail/a_id/5415)

collector/nvd-index
agent/severity
agent/weakness
agent/references
agent/author
agent/type
agent/event
agent/description
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
agent/tags
collector/mitre-cve
source/MITRE
vendor/nvidia
canonical/nvidia virtual gpu
version/nvidia virtual gpu/13.0
version/nvidia virtual gpu/14.0
vendor/microsoft
canonical/microsoft windows
canonical/nvidia cloud gaming

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.