CVE-2016-4960: NVIDIA Geforce Experience

High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days.

For the NVIDIA Quadro, NVS, and GeForce products, the NVIDIA NVStreamKMS.sys service component is improperly validating user-supplied data through its API entry points causing an elevation of privilege.

Affected products

• NVIDIA Geforce Experience: affected versions not specified

Published 2016-11-08. Last modified 2026-06-17.