CVE-2020-5992

NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its open-source software dependency in which the OpenSSL library is vulnerable to binary planting attacks by a local user, which may lead to code execution or escalation of privileges.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@nvidia.com

Published

2020-11-11

Last modified

2024-08-04

Weaknesses

CWE-427

Affected products

• Geforce Now (Nvidia)
• Nvidia Geforce Now Application (Nvidia)

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5096