CVE-2019-5676

EPSS 0.5%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

10 may 2019Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), leading to escalation of privileges through code execution.

Productos afectados

NVIDIA · NVIDIA GPU Display Driver

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://nvidia.custhelp.com/app/answers/detail/a_id/4797 https://nvidia.custhelp.com/app/answers/detail/a_id/4806 https://nvidia.custhelp.com/app/answers/detail/a_id/4841 https://support.lenovo.com/us/en/product_security/LEN-27815