CVE-2019-5701
HIGHNvidia Geforce Experience < 3.20.0.118 - Uncontrolled Search Path
Title source: ruleDescription
NVIDIA GeForce Experience, all versions prior to 3.20.0.118, contains a vulnerability when GameStream is enabled in which an attacker with local system access can load the Intel graphics driver DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), which may lead to denial of service, information disclosure, or escalation of privileges through code execution.
Scores
CVSS v3
7.8
EPSS
0.0019
EPSS Percentile
40.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Classification
CWE
CWE-427
Status
published
Affected Products (1)
nvidia/geforce_experience
< 3.20.0.118
Timeline
Published
Nov 09, 2019
Tracked Since
Feb 18, 2026