VULNERABILITY INTELLIGENCE

CVE-2022-42266

CVSS score5.5 MEDIUM
EPSS probability0.19%
CISA KEVNot currently listed
Published2022-12-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can cause exposure of sensitive information to an actor that is not explicitly authorized to have access to that information, which may lead to limited information disclosure.

Weakness classification

  • psirt@nvidia.com: CWE-200
  • nvd@nist.gov: CWE-200

Primary references