Information disclosure in NVIDIA App (formerly GeForce Experience) - CVE-2018-6262
Published: October 2, 2018 / Updated: July 17, 2020
Vulnerability identifier: #VU31197
CSH Severity: Low
CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-6262
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local authenticated user to gain access to sensitive information.
NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled where limited sensitive user information may be available to users with system access, which may lead to information disclosure.
Affected software
NVIDIA App (formerly GeForce Experience)
How to mitigate CVE-2018-6262
Install update from vendor's website.
NVIDIA App (formerly GeForce Experience) - update to 3.15