CVE-2022-31617: NVIDIA Cloud Gaming Guest

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds read, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

Affected products

• NVIDIA Cloud Gaming Guest: before 516.94 (fixed in 516.94)
• NVIDIA GPU Display Driver: from 471.11, before 473.81 (fixed in 473.81); from 516.25, before 516.94 (fixed in 516.94); from 511.09, before 513.46 (fixed in 513.46); from 451.48, before 453.64 (fixed in 453.64); from 471.11, before 472.81 (fixed in 472.81)
• NVIDIA Virtual GPU: from 11.0, before 11.8 (fixed in 11.8); from 13.0, before 13.3 (fixed in 13.3); version 14.0 only

Published 2022-11-19. Last modified 2026-06-17.