GPU Display Driver (Windows): Local privesc during driver update

CVSS 8.2CVE-2023-31027NVIDIA / GPU stackcurated

Impact

Local privesc during driver update

Who can reach it

Local low-priv user on the host

What to do

Upgrade to Oct-2023 driver branch; Windows hosts only

References

https://raw.githubusercontent.com/NVIDIA/product-security/main/2023/5491/5491.md

Related entries

GPU Display Driver (Windows): Local privesc via named-pipe server accessCVE-2023-31019 · GPU Display Driver (Windows)High
GPU Display Driver (Windows): Arbitrary code exec via uncontrolled search pathCVE-2023-31016 · GPU Display Driver (Windows)High
GPU Display Driver (Windows): DoS / data tamperingCVE-2023-31020 · GPU Display Driver (Windows)Medium
GPU Display Driver (Windows): DoS (untrusted pointer deref)CVE-2023-31023 · GPU Display Driver (Windows)Medium
GPU Display Driver (Windows): Arbitrary write to privileged locations via reparse pointsCVE-2023-31017 · GPU Display Driver (Windows)High
ChatRTX: Local privescCVE-2024-0082 · ChatRTXHigh

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.