CVE-2023-31017
High
Description
NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write arbitrary data to privileged locations by using reparse points. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.
SeverityHigh
CVSS7.8
Exploit probability—
ProductNvidia Virtual Gpu
PublishedNov 2, 2023
First seenNov 2, 2023
Weakness typeCWE-552CWE-552
How to fix
Update
- nvidia virtual_gpu13.9, 15.4, 16.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nvidia virtual_gpu | v < 13.9, 14.0 ≤ v < 15.4, 16.0 ≤ v < 16.2 | 13.9, 15.4, 16.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.