← Vulnerability feed

Vulnerability record · CVE-2023-31017 · published 2 November 2023

CVE-2023-31017: Nvidia virtual gpu vulnerability

Nvidia · Virtual Gpu

NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write arbitrary data to privileged locations by using reparse points. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

7.8 CVSS 3.1 High EPSS 0.19% · top 91.9% CWE-552 · CWE-552
7.8CVSS 3.1 base score
0.19%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write arbitrary data to privileged locations by using reparse points. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://nvidia.custhelp.com/app/answers/detail/a_id/5491 Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5491 Vendor Advisory

Track CVE-2023-31017 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.9CVE-2022-28181Nvidia virtual gpu out-of-bounds write vulnerabilityNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network …EPSS 1.1%8.5CVE-2022-28182Nvidia gpu display driver out-of-bounds write vulnerabilityNVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where an unauthorized attacker on …EPSS 1.6%7.8CVE-2024-0107Nvidia gpu display driver out-of-bounds read vulnerabilityNVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds …EPSS 0.46%7.8CVE-2024-0090Nvidia gpu display driver out-of-bounds write vulnerabilityNVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerab…EPSS 0.27%7.8CVE-2024-0091Nvidia gpu display driver vulnerabilityNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a drive…EPSS 0.24%7.8CVE-2024-0084Nvidia virtual gpu execution with unnecessary privileges vulnerabilityNVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could execute privileged operations. A success…EPSS 0.23%7.8CVE-2024-0085Nvidia virtual gpu vulnerabilityNVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A succe…EPSS 0.12%7.8CVE-2024-0089Nvidia gpu display driver vulnerabilityNVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed. A …EPSS 0.23%

Source: NIST National Vulnerability Database (record CVE-2023-31017), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.