Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-28182

Опубликовано: 17 мая 2022
Источник: nvd
CVSS3: 8.5
CVSS2: 6.8
EPSS Низкий

Описание

NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where an unauthorized attacker on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution to cause denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:nvidia:gpu_display_driver:-:*:*:*:*:windows:*:*
Конфигурация 2

Одновременно

Одно из

cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
Версия от 11.0 (включая) до 11.8 (исключая)
cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
Версия от 13.0 (включая) до 13.3 (исключая)
cpe:2.3:a:nvidia:virtual_gpu:14.0:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 78%
0.01143
Низкий

8.5 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787
CWE-787

Связанные уязвимости

CVSS3: 8.5
ubuntu
больше 3 лет назад

NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where an unauthorized attacker on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution to cause denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.

CVSS3: 8.5
github
больше 3 лет назад

NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where an unauthorized attacker on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution to cause denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.

CVSS3: 8.5
fstec
почти 4 года назад

Уязвимость драйвера пользовательского режима DirectX11 графического драйвера NVIDIA GPU Display Driver, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 78%
0.01143
Низкий

8.5 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787
CWE-787