VULNERABILITY INTELLIGENCE

CVE-2015-1170

CVSS score7.2 HIGH
EPSS probability0.39%
CISA KEVNot currently listed
Published2015-03-06
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a "kernel administrator check," which allows local users to gain administrator privileges via unspecified API calls.

Primary references