CVE-2019-5687

HIGH

NVIDIA Windows GPU Display Driver - Incorrect Default Permissions in Kernel Mode Layer Handler

Title source: llm
STIX 2.1

Description

NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which an incorrect use of default permissions for an object exposes it to an unintended actor

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
https://nvidia.custhelp.com/app/answers/detail/a_id/4841
Third Party Advisory x_refsource_confirm
https://support.lenovo.com/us/en/product_security/LEN-28096

Scores

CVSS v3 7.1
EPSS 0.0004
EPSS Percentile 11.3%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Details

CWE
CWE-276
Status published
Products (1)
nvidia/gpu_driver
Published Aug 06, 2019
Tracked Since Feb 18, 2026