Vulnerability in Microsoft Windows
CVE-2019-5695
NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), which may lead to denial of service or information disclosure through code execution.
EPSS: 0.009 (58.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Microsoft Windows
- Nvidia Geforce_experience
- Nvidia Gpu_driver
- Nvidia Geforce Experience — versions prior to 3.20.1
- Nvidia Windows Gpu Display Driver — versions all versions
Weakness classification (CWE)
References
- psirt@nvidia.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@nvidia.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@nvidia.com (Exploit, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-5695?
- CVE-2019-5695 is a medium-severity vulnerability in Microsoft Windows, classified under Uncontrolled Search Path Element. CVSS score: 6.5/10. Published 2019-11-12.
- How severe is CVE-2019-5695?
- Medium severity. CVSS v3 base score is 6.5 out of 10.