CVE-2022-28182: NVIDIA GPU Display Driver

High severity, CVSS 8.5. EPSS: 1.6% chance of exploitation in the next 30 days.

NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where an unauthorized attacker on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution to cause denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.

Affected products

• NVIDIA GPU Display Driver: affected versions not specified
• NVIDIA Virtual GPU: from 11.0, before 11.8 (fixed in 11.8); from 13.0, before 13.3 (fixed in 13.3); version 14.0 only

Published 2022-05-17. Last modified 2026-06-17.