CVE-2022-28181: NVIDIA GPU Display Driver

Critical severity, CVSS 9.9. EPSS: 1.1% chance of exploitation in the next 30 days.

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.

Affected products

• NVIDIA GPU Display Driver: affected versions not specified
• NVIDIA Virtual GPU: from 11.0, before 11.8 (fixed in 11.8); from 13.0, before 13.3 (fixed in 13.3); version 14.0 only

Published 2022-05-17. Last modified 2026-06-17.