← Vulnerability feed

Vulnerability record · CVE-2022-42266 · published 30 December 2022

CVE-2022-42266: Nvidia virtual gpu information exposure vulnerability

Nvidia · Virtual Gpu

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can cause exposure of sensitive information to an actor that is not explicitly authorized to have access to that information, which may lead to limited information disclosure.

3.3 CVSS 3.1 Low EPSS 0.18% · top 93.3% CWE-200 · Information exposure
3.3CVSS 3.1 base score
0.18%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can cause exposure of sensitive information to an actor that is not explicitly authorized to have access to that information, which may lead to limited information disclosure.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://nvidia.custhelp.com/app/answers/detail/a_id/5415 Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5415 Vendor Advisory

Track CVE-2022-42266 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.9CVE-2022-28181Nvidia virtual gpu out-of-bounds write vulnerabilityNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network …EPSS 1.1%8.5CVE-2022-28182Nvidia gpu display driver out-of-bounds write vulnerabilityNVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where an unauthorized attacker on …EPSS 1.6%7.8CVE-2024-0107Nvidia gpu display driver out-of-bounds read vulnerabilityNVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds …EPSS 0.46%7.8CVE-2024-0090Nvidia gpu display driver out-of-bounds write vulnerabilityNVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerab…EPSS 0.27%7.8CVE-2024-0091Nvidia gpu display driver vulnerabilityNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a drive…EPSS 0.24%7.8CVE-2024-0084Nvidia virtual gpu execution with unnecessary privileges vulnerabilityNVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could execute privileged operations. A success…EPSS 0.23%7.8CVE-2024-0085Nvidia virtual gpu vulnerabilityNVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A succe…EPSS 0.12%7.8CVE-2024-0089Nvidia gpu display driver vulnerabilityNVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed. A …EPSS 0.23%

Source: NIST National Vulnerability Database (record CVE-2022-42266), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.