CVE-2019-5676: NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without…

PriorityP427medium6.7CVSS 3.1

AVLACLPRHUINSUCHIHAH

EPSS

0.52%

40.5th percentile

NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), leading to escalation of privileges through code execution.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
nvidia	geforce_experience	< 3.19	3.19
nvidia	gpu_display_driver	>= 410 < 412.36	412.36
nvidia	gpu_display_driver	>= 418 < 425.51	425.51
nvidia	gpu_display_driver	>= 430 < 430.64	430.64
nvidia	nvidia_gpu_display_driver	—	—

CVSS provenance

nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.