Geforce Experience

NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of service, or escalation of privileges.

Published: 2019-03-28T14:09:11.000Z
Updated: 2024-08-04T20:01:52.193Z

NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows where a local user may obtain third party integration parameters, which may lead to information disclosure.

Published: 2018-11-27T18:00:00.000Z
Updated: 2024-09-16T22:45:56.617Z

NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 during application installation on Windows 7 in elevated privilege mode, where a local user who initiates a browser session may obtain escalation of privileges on the browser.

Published: 2018-11-27T18:00:00.000Z
Updated: 2024-09-16T18:55:53.557Z

NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows in which an attacker who has access to a local user account can plant a malicious dynamic link library (DLL) during application installation, which may lead to escalation of privileges.

Published: 2018-11-27T18:00:00.000Z
Updated: 2024-09-17T02:00:32.427Z

NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled where limited sensitive user information may be available to users with system access, which may lead to information disclosure.

Published: 2018-10-02T17:00:00.000Z
Updated: 2024-09-16T16:59:01.642Z

NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled which sets incorrect permissions on a file, which may to code execution, denial of service, or escalation of privileges by users with system access.

Published: 2018-10-02T17:00:00.000Z
Updated: 2024-09-17T02:06:44.561Z

NVIDIA GeForce Experience contains a vulnerability in NVIDIA Web Helper.exe, where untrusted script execution may lead to violation of application execution policy and local code execution.

Published: 2017-04-28T21:00:00.000Z
Updated: 2024-08-05T15:25:48.881Z

In GeForce Experience (GFE) 3.x before 3.10.0.55, NVIDIA Installer Framework contains a vulnerability in NVISystemService64 where a value passed from a user to the driver is used without validation, which may lead to denial of service or possible escalation of privileges.

Published: 2017-10-16T21:00:00.000Z
Updated: 2024-09-16T19:21:07.335Z

NVIDIA GeForce Experience 3.x before GFE 3.1.0.52 contains a vulnerability in NVIDIA Web Helper.exe where a local web API endpoint, /VisualOPS/v.1.0./, lacks proper access control and parameter validation, allowing for information disclosure via a directory traversal attack.

Published: 2016-12-16T21:00:00.000Z
Updated: 2024-08-06T02:35:02.274Z