VULNERABILITY INTELLIGENCE

CVE-2019-5675

CVSS score7.8 HIGH
EPSS probability0.38%
CISA KEVNot currently listed
Published2019-05-10
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the product does not properly synchronize shared data, such as static variables across threads, which can lead to undefined behavior and unpredictable data changes, which may lead to denial of service, escalation of privileges, or information disclosure.

Weakness classification

  • CWE-662: Improper Synchronization

Primary references