Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-42266
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can cause exposure of sensitive information to an actor that is not explicitly authorized to have access to that information, which may lead to limited information disclosure.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
信息暴露
Source: NVD (National Vulnerability Database)
Vulnerability Title
NVIDIA GPU Display Driver 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NVIDIA GPU Display Driver是美国英伟达（NVIDIA）公司的一个用于操作系统中对显卡显示模块进行交互支持的驱动软件。 NVIDIA GPU Display Driver 存在安全漏洞，该漏洞源于在 DxgkDdiEscape 的内核模式层 (nvlddmkm.sys) 处理程序中，无特权的普通用户可能会将敏感信息暴露给未明确授权访问该信息的参与者，这可能会导致有限的信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
NVIDIAvGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver) All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release -
II. Public POCs for CVE-2022-42266
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2022-42266
Please Login to view more intelligence information
IV. Related Vulnerabilities
Same product: vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver)
Same vendor: NVIDIA
Same weakness: CWE-200
V. Comments for CVE-2022-42266

No comments yet

Leave a comment