CVE-2022-42262: NVIDIA Cloud Gaming

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service.

Affected products

• NVIDIA Cloud Gaming: before 525.60.12 (fixed in 525.60.12)
• NVIDIA GPU Display Driver: from 470, before 470.161.03 (fixed in 470.161.03); from 510, before 510.108.03 (fixed in 510.108.03); from 450, before 450.216.04 (fixed in 450.216.04)
• NVIDIA Virtual GPU: before 11.11 (fixed in 11.11); from 12.0, before 13.6 (fixed in 13.6); from 14.0, before 14.4 (fixed in 14.4)

Published 2022-12-30. Last modified 2026-06-17.