CVE-2019-5676
Medium
Description
NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), leading to escalation of privileges through code execution.
SeverityMedium
CVSS6.7
Exploit probability—
ProductNvidia Gpu Display Driver
PublishedMay 10, 2019
First seenMay 10, 2019
How to fix
Update
- nvidia gpu_display_driver412.36, 425.51, 430.64 or later
- nvidia geforce_experience3.19 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nvidia gpu_display_driver | 410 ≤ v < 412.36, 418 ≤ v < 425.51, 430 ≤ v < 430.64 | 412.36, 425.51, 430.64 |
| nvidia geforce_experience | v < 3.19 | 3.19 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.