title: CVE
description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer when the driver is performing an operation at a privilege level that is higher than the minimum level required. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
problem types: CWE-250
affected:
{
defaultStatus: unaffected
product: GPU Display driver, vGPU driver, Cloud Gaming driver
vendor: nvidia
versions:
status: affected, version: All versions prior to and including 16.3, 13.9, and all versions prior to and including the January 2024 release
}
metrics:
cvssV3_1: [
baseScore: 7.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL