VULNERABILITY INTELLIGENCE

CVE-2019-5674

CVSS score7 HIGH
EPSS probability1.16%
CISA KEVNot currently listed
Published2019-03-28
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of service, or escalation of privileges.

Weakness classification

  • CWE-59: Improper Link Resolution Before File Access ('Link Following')

Primary references