Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-prf4-82qm-xc4f

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

NVIDIA Windows GPU Display Driver for Windows, R390 driver branch, contains a vulnerability in its installer where an attacker with local system access may replace an application resource with malicious files. Such an attack may lead to code execution, escalation of privileges, denial of service, or information disclosure.

NVIDIA Windows GPU Display Driver for Windows, R390 driver branch, contains a vulnerability in its installer where an attacker with local system access may replace an application resource with malicious files. Such an attack may lead to code execution, escalation of privileges, denial of service, or information disclosure.

EPSS

Процентиль: 29%
0.00107
Низкий

7.3 High

CVSS3

Связанные уязвимости

CVSS3: 7.3
nvd
почти 5 лет назад

NVIDIA GPU Display Driver for Windows installer contains a vulnerability where an attacker with local unprivileged system access may be able to replace an application resource with malicious files. This attack requires a user with system administration rights to execute the installer and requires the attacker to replace the files in a very short time window between file integrity validation and execution. Such an attack may lead to code execution, escalation of privileges, denial of service, and information disclosure.

EPSS

Процентиль: 29%
0.00107
Низкий

7.3 High

CVSS3