Improper Privilege Management in NVIDIA Windows GPU Display Driver - CVE-2022-42266
Published: December 1, 2022
Vulnerability identifier: #VU69816
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-42266
CWE-ID: CWE-269
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to gain access to sensitive information.
The
vulnerability exists due to improper privilege management in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape within the
NVIDIA GPU Display Driver for Windows. A local user can gain access to sensitive information.
Affected software
NVIDIA Windows GPU Display Driver
How to mitigate CVE-2022-42266
Install updates from vendor's website.
NVIDIA Windows GPU Display Driver - addressed in versions 474.04, 474.06, 526.98