NVIDIA Cloud Gaming vulnerabilities

37 CVEs affecting NVIDIA Cloud Gaming, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-0107, published 2024-08-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-0107, published 2024-08-08. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability…
CVE-2022-34683, published 2022-12-30. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a null-pointer dereference occurs, which may lead to denial of…
CVE-2022-34669, published 2022-12-30. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can access or modify system files or other files that are critical to the…
CVE-2022-34677, published 2022-12-30. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be truncated, which may lead to denial of…
CVE-2022-34670, published 2022-12-30. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive…
CVE-2022-34680, published 2022-12-30. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an integer truncation can lead to an out-of-bounds read, which may lead to denial of service.
CVE-2022-42258, published 2022-12-30. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to denial of service, data tampering, or information disclosure.
CVE-2022-42257, published 2022-12-30. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to information disclosure, data tampering or denial of service.
CVE-2022-34674, published 2022-12-30. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where a helper function maps more physical pages than were requested, which may lead to undefined…
CVE-2024-0090, published 2024-06-13. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of…

Latest

CVE-2024-0093, published 2024-06-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorized to have access to that information. A successful exploit…
CVE-2024-0092, published 2024-06-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU Driver for Windows and Linux contains a vulnerability where an improper check or improper handling of exception conditions might lead to denial of service.
CVE-2024-0091, published 2024-06-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of this vulnerability…
CVE-2024-0089, published 2024-06-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed. A successful exploit of this vulnerability might…
CVE-2024-0086, published 2024-06-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA vGPU software for Linux contains a vulnerability where the software can dereference a NULL pointer. A successful exploit of this vulnerability might lead to denial of service and undefined…
CVE-2024-0085, published 2024-06-13. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful exploit of this vulnerability might lead to…
CVE-2024-0084, published 2024-06-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could execute privileged operations. A successful exploit of this vulnerability might lead to…
CVE-2023-25515, published 2023-06-23. High severity, CVSS 7.6. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges,…