Vulnerabilidades em Nvidia Corporation

139 resultados
Análise Vexday

Com 138 CVEs catalogadas e nenhuma atualmente listada no CISA KEV, a Nvidia Corporation apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que indica um perfil de risco relativamente contido em termos de ameaças confirmadas em ambiente real. A ausência de vulnerabilidades de severidade crítica ativas e o fato de nenhuma CVE ter surgido nos últimos 90 dias reforçam um cenário de estabilidade no curto prazo. Ainda assim, duas vulnerabilidades possuem Prova de Conceito (PoC) pública, o que eleva o potencial de tentativas oportunistas de exploração. A CVE mais perigosa identificada atualmente é CVE-2016-8827, com escore EPSS de 0,0532, sugerindo probabilidade baixa, porém não negligenciável, de exploração — recomenda-se verificar se ambientes legados ainda expostos a essa vulnerabilidade foram devidamente corrigidos.

CVE-2016-8827—NVIDIA GeForce Experience 3.x before GFE 3.1.0.52 contains a vulnerability in NVIDIA Web Helper.exe where a local web API endpoint, /VisualOEPSS 5.3%CVE-2018-6242—Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode (RCM). An attackEPSS 2.7%CVE-2017-0332—An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code witEPSS 2.1%CVE-2017-0329—An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local malicious application EPSS 2.1%CVE-2017-0327—An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code witEPSS 1.8%CVE-2017-0339—An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code witEPSS 1.8%CVE-2017-0325—An elevation of privilege vulnerability in the NVIDIA I2C HID driver could enable a local malicious application to execute arbitrary code wiEPSS 1.8%CVE-2017-0307—An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinEPSS 1.8%CVE-2017-0306—An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinEPSS 1.7%CVE-2017-0338—An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinEPSS 1.7%CVE-2017-0333—An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinEPSS 1.7%CVE-2017-0337—An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinEPSS 1.7%CVE-2017-0335—An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinEPSS 1.7%CVE-2017-6264—An elevation of privilege vulnerability exists in the NVIDIA GPU driver (gm20b_clk_throt_set_cdev_state), where an out of bound memory read EPSS 1.6%CVE-2017-0313—All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmEPSS 1.6%CVE-2017-0312—All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscapeIEPSS 1.4%CVE-2017-0340—An elevation of privilege vulnerability in the NVIDIA Libnvparser component due to a memcpy into a fixed sized buffer with a user-controlledEPSS 1.2%CVE-2017-0328—An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of itsEPSS 1.2%CVE-2019-5674—NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the EPSS 1.2%CVE-2017-0330—An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of itsEPSS 1.1%