CVE-2019-5675

highPriorität · verfolgen · 31EPSS 0.004 · 32. PerzentilEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.38% (32nd) EPSS

CVSS 7.2 · high

Is it mine?

9 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · bewertet 2026-10-27

NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the product does not properly synchronize shared data, such as static variables across threads, which can lead to undefined behavior and unpredictable data changes, which may lead to denial of service, escalation of privileges, or information disclosure.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 10

v3.07.8highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 5.9

v3.07.1highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.17.7highAV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:Hsecondary · FSTEC (BDU) RU

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-662USprimärCWE-19US

betroffene Produkte (9)

Betroffene Produkte und Versionsbereiche.

NVIDIA NVIDIA GPU Display Driver≤ Allenisa_euvdEU
NVIDIA Corp. GeForce R430≤ 430.64fstec_bduRU
NVIDIA Corp. Quadro R390≤ 392.53fstec_bduRU
NVIDIA Corp. Quadro R410≤ 412.36fstec_bduRU
NVIDIA Corp. Quadro R418≤ 425.51fstec_bduRU
NVIDIA Corp. Quadro R430≤ 430.64fstec_bduRU
NVIDIA Corp. Tesla R410≤ 412.36fstec_bduRU
NVIDIA Corp. Tesla R418≤ 425.25fstec_bduRU
nvidia gpu driveralle VersionennvdUScpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

veröffentlicht 2019-05-10geändert 2026-06-17

verwandt (263)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2020-7457US	high8.1	33.1% (98th)	Exploit	2020-07-09
In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p11, missing synchronization in the IPV6_…
CVE-2023-0045US	high7.5	2.40% (84th)	Exploit	2023-04-25
The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set function updates the Thread Information Flags (TIFs) for th…
CVE-2018-15555US	critical9.8	2.97% (87th)	—	2019-06-28
On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by using the enabled onboard UART headers.
CVE-2024-32644US	critical9.1	0.94% (61st)	—	2024-04-19
Evmos is a scalable, high-throughput Proof-of-Stake EVM blockchain that is fully compatible and interoperable with Ethereum. Prior to 17.0.0, there is a way to mint arbitrary token…
CVE-2022-23005US	high8.7	0.81% (57th)	—	2023-01-23
Western Digital has identified a weakness in the UFS standard that could result in a security vulnerability. This vulnerability may exist in some systems where the Host boot ROM co…

+258 weitere

Referenzen (8)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan