What’s Vulnerable › Vulnerabilities

CVE-2016-4960

• Severity: high (CVSS 7.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-11-08 · updated 2026-06-17
• Weakness: CWE-20

Description

For the NVIDIA Quadro, NVS, and GeForce products, the NVIDIA NVStreamKMS.sys service component is improperly validating user-supplied data through its API entry points causing an elevation of privilege.

Affected products

• Quadro, NVS, and GeForce (all versions): all versions

References

• http://nvidia.custhelp.com/app/answers/detail/a_id/4213
• http://www.securityfocus.com/bid/93251
• https://support.lenovo.com/us/en/product_security/ps500070
• http://nvidia.custhelp.com/app/answers/detail/a_id/4213
• http://www.securityfocus.com/bid/93251
• https://support.lenovo.com/us/en/product_security/ps500070

Get alerted when CVE-2016-4960 or the next vulnerability affects your stack