VULNERABILITY INTELLIGENCE
CVE-2022-34669
CVSS score8.8 HIGH
EPSS probability0.28%
CISA KEVNot currently listed
Published2022-12-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can access or modify system files or other files that are critical to the application, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.
Weakness classification
- CWE-73: External Control of File Name or Path
- CWE-610: Externally Controlled Reference to a Resource in Another Sphere
Primary references
- psirt@nvidia.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory