VULNERABILITY INTELLIGENCE
CVE-2019-5678
CVSS score7.8 HIGH
EPSS probability0.93%
CISA KEVNot currently listed
Published2019-05-31
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
NVIDIA GeForce Experience versions prior to 3.19 contains a vulnerability in the Web Helper component, in which an attacker with local system access can craft input that may not be properly validated. Such an attack may lead to code execution, denial of service or information disclosure.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- psirt@nvidia.com — Patch, Vendor Advisory
- psirt@nvidia.com
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108