CVEvulnerability
CVE-2019-5678
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-05-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
NVIDIA GeForce Experience versions prior to 3.19 contains a vulnerability in the Web Helper component, in which an attacker with local system access can craft input that may not be properly validated. Such an attack may lead to code execution, denial of service or information disclosure.
Affected configurations
• nvidia geforce experience (< 3.19)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/4806 Patch, Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-27815 support.lenovo.com
- https://nvidia.custhelp.com/app/answers/detail/a_id/4806 Patch, Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-27815 support.lenovo.com