← Back

CVE-2022-42266

nvd nist
Published: Dec 30, 2022Modified: Jun 17, 2026

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 1.8 / Impact: 1.4
Source: NVD

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can cause exposure of sensitive information to an actor that is not explicitly authorized to have access to that information, which may lead to limited information disclosure.

Affected (4)

Nvidia
2 products
Virtual Gpu
Cloud Gaming
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Nvidia
Virtual Gpu
Before 11.11
Virtual Gpu
From 13.0 to 13.6
Virtual Gpu
From 14.0 to 14.4
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cloud Gaming
Before 527.27
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: psirt@nvidia.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.