#VU31197 Information disclosure in NVIDIA App (formerly GeForce Experience) - CVE-2018-6262

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU31197

#VU31197 Information disclosure in NVIDIA App (formerly GeForce Experience) - CVE-2018-6262

Published: October 2, 2018 / Updated: July 17, 2020


Vulnerability identifier: #VU31197
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2018-6262
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability: No public exploit available
Vulnerable software:
NVIDIA App (formerly GeForce Experience)
Software vendor:
nVidia

Description

The vulnerability allows a local authenticated user to gain access to sensitive information.

NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled where limited sensitive user information may be available to users with system access, which may lead to information disclosure.


Remediation

Install update from vendor's website.

External links