CVE-2022-28186: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where the product receives…

PriorityP425medium6.1CVSS 3.1

AVLACLPRLUINSUCNILAH

EPSS

0.27%

18.8th percentile

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where the product receives input or data, but does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly, which may lead to denial of service or data tampering.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
nvidia	nvidia_gpu_display_driver	—	—
nvidia	virtual_gpu	—	—
nvidia	virtual_gpu	>= 11.0 < 11.8	11.8
nvidia	virtual_gpu	>= 13.0 < 13.3	13.3

CVSS provenance

nvdv3.16.1MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

nvdv2.03.6LOWAV:L/AC:L/Au:N/C:N/I:P/A:P

osv6.1MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.