← Vulnerability feed

Vulnerability record · CVE-2016-8827 · published 16 December 2016

CVE-2016-8827: Nvidia geforce experience path traversal vulnerability

Nvidia · Geforce Experience

NVIDIA GeForce Experience 3.x before GFE 3.1.0.52 contains a vulnerability in NVIDIA Web Helper.exe where a local web API endpoint, /VisualOPS/v.1.0./, lacks proper access control and parameter validation, allowing for information disclosure via a directory traversal attack.

6.5 CVSS 3.1 Medium EPSS 5.3% · top 7.7% CWE-22 · Path traversal
6.5CVSS 3.1 base score, v2 5.0
5.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
17 Jun 2026Last modified by NVD

Description

NVIDIA GeForce Experience 3.x before GFE 3.1.0.52 contains a vulnerability in NVIDIA Web Helper.exe where a local web API endpoint, /VisualOPS/v.1.0./, lacks proper access control and parameter validation, allowing for information disclosure via a directory traversal attack.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://nvidia.custhelp.com/app/answers/detail/a_id/4279 Vendor Advisory
http://www.securityfocus.com/bid/94964 Third Party AdvisoryVDB Entry
https://nvidia.custhelp.com/app/answers/detail/a_id/5033 Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5155 Not Applicable
http://nvidia.custhelp.com/app/answers/detail/a_id/4279 Vendor Advisory
http://www.securityfocus.com/bid/94964 Third Party AdvisoryVDB Entry
https://nvidia.custhelp.com/app/answers/detail/a_id/5033 Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5155 Not Applicable

Track CVE-2016-8827 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-14491dnsmasq heap buffer overflow via crafted DNS responsednsmasq before 2.78 contains a heap-based buffer overflow (CWE-787 out-of-bounds write) triggered by a crafted DNS response. Because dnsmasq is widel…EPSS 85%analysed8.8CVE-2017-6250Nvidia geforce experience vulnerabilityNVIDIA GeForce Experience contains a vulnerability in NVIDIA Web Helper.exe, where untrusted script execution may lead to violation of application ex…EPSS 0.35%8.8CVE-2016-8812Nvidia geforce experience memory buffer overflow vulnerabilityFor the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulner…EPSS 1.6%8.3CVE-2021-1073Nvidia geforce experience vulnerabilityNVIDIA GeForce Experience, all versions prior to 3.23, contains a vulnerability in the login flow when a user tries to log in by using a browser, whi…EPSS 0.90%8.2CVE-2021-23175Nvidia geforce experience incorrect authorization vulnerabilityNVIDIA GeForce Experience contains a vulnerability in user authorization, where GameStream does not correctly apply individual user access controls f…EPSS 0.45%7.8CVE-2022-42292Nvidia geforce experience link following vulnerabilityNVIDIA GeForce Experience contains a vulnerability in the NVContainer component, where a user without administrator privileges can create a symbolic …EPSS 0.18%7.8CVE-2020-5990Nvidia geforce experience vulnerabilityNVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in the ShadowPlay component which may lead to local privilege es…EPSS 0.38%7.8CVE-2020-5977Nvidia geforce experience untrusted search path vulnerabilityNVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled …EPSS 0.43%

Source: NIST National Vulnerability Database (record CVE-2016-8827), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.