CVE-2019-5674: NVIDIA Geforce Experience

High severity, CVSS 7.0. EPSS: 1.2% chance of exploitation in the next 30 days.

NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of service, or escalation of privileges.

Affected products

• NVIDIA Geforce Experience: before 3.18 (fixed in 3.18)

Published 2019-03-28. Last modified 2026-06-17.