Information disclosure in NVIDIA App (formerly GeForce Experience) - CVE‑2018‑6266
Published: November 21, 2018
Vulnerability identifier: #VU16001
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE‑2018‑6266
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to obtain potentially sensitive information on the target system.
The vulnerability exists due information exposure. A local attacker can obtain third party integration parameters and access arbitrary data.
Affected software
NVIDIA App (formerly GeForce Experience)
How to mitigate CVE‑2018‑6266
Update to version 3.16.
NVIDIA App (formerly GeForce Experience) - update to 3.16