CVE-2024-0117: NVIDIA Cloud Gaming Guest

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected products

• NVIDIA Cloud Gaming Guest: before 566.03 (fixed in 566.03)
• NVIDIA Gpu, Vgpu, And Cloud Gaming
• NVIDIA GPU Display Driver: from 565, before 566.03 (fixed in 566.03); from 550, before 553.24 (fixed in 553.24); from 535, before 538.95 (fixed in 538.95)
• NVIDIA Virtual GPU: before 16.8 (fixed in 16.8); from 17.0, before 17.4 (fixed in 17.4)

Published 2024-10-26. Last modified 2026-06-17.