CVE-2021-23175
CVE-2021-23175
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.2EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
23 Dec 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
NVIDIA GeForce Experience contains a vulnerability in user authorization, where GameStream does not correctly apply individual user access controls for users on the same device, which, with user intervention, may lead to escalation of privileges, information disclosure, data tampering, and denial of service, affecting other resources beyond the intended security authority of GameStream.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Affected products
NVIDIA · NVIDIA GeForce Experience SoftwareWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →