Improper input validation in Quadro, NVS, GeForce
Priority LOW 32CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
For the NVIDIA Quadro, NVS, and GeForce products, the NVIDIA NVStreamKMS.sys service component is improperly validating user-supplied data through its API entry points causing an elevation of privilege.
Why it matters now
EPSS 0.00342 27th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Quadro, NVS, GeForce (all versions) | Quadro, NVS, GeForce (all versions) | — | No fix listed | CNA |
- Quadro, NVS, GeForce (all versions) Vendor— Affected Quadro, NVS, GeForce (all versions) Fixed in — No fix listed CNA
CPE configurations NVD · 40
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:nvidia:geforce_experience:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NVIDIA |
| cpe:2.3:h:nvidia:geforce_910m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_920m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_920mx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_930m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_930mx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_940m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_940mx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_945m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_gt_710:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
- cpe:2.3:a:nvidia:geforce_experience:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NVIDIA
- cpe:2.3:h:nvidia:geforce_910m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_920m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_920mx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_930m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_930mx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_940m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_940mx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_945m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_gt_710:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
Show 30 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:nvidia:geforce_gt_730:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_gtx_1050:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_gtx_1060:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_gtx_1070:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_gtx_1080:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_gtx_950m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_gtx_960m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_gtx_965m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:nvs_310:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:nvs_315:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:nvs_510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:nvs_810:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_k1200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_k420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_k620:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m1000m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m2000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m2000m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m3000m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m4000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m4000m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m5000m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m500m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m5500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m6000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m600m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_p5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_p6000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:titan_x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
- cpe:2.3:h:nvidia:geforce_gt_730:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_gtx_1050:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_gtx_1060:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_gtx_1070:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_gtx_1080:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_gtx_950m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_gtx_960m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_gtx_965m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:nvs_310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:nvs_315:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:nvs_510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:nvs_810:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_k1200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_k420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_k620:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m1000m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m2000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m2000m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m3000m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m4000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m4000m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m5000m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m500m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m5500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m6000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m600m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_p5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_p6000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:titan_x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2016-4960
- 2026-10-03 Alias added: GHSA-gg38-rv87-v946
References
More NVIDIA Geforce Experience vulnerabilities
- TI-2017-10594 Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a… CVSS 3.1CRITICAL 9.8
- TI-2016-07254 Memory corruption in Quadro, NVS, and GeForce CVSS 3.0HIGH 8.8
- TI-2021-00801 NVIDIA GeForce Experience, all versions prior to 3.23, contains a vulnerability in the… CVSS 3.1HIGH 8.3
- TI-2017-04084 NVIDIA GeForce Experience contains a vulnerability in NVIDIA Web Helper.exe, where… CVSS 3.0HIGH 8.8
- TI-2016-07269 Path traversal in NVIDIA GeForce Experience CVSS 3.1MEDIUM 6.5
- TI-2021-05951 Incorrect authorization in NVIDIA GeForce Experience Software CVSS 3.1HIGH 8.2
Sources
- CVE-2016-4960 · CVE Program
- CVE-2016-4960 · NVD
- FIRST EPSS
- GHSA-gg38-rv87-v946 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences