What’s Vulnerable › Vulnerabilities

CVE-2019-5674

• Severity: high (CVSS 7.0 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-03-28 · updated 2026-06-17
• Weakness: CWE-59

Description

NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of service, or escalation of privileges.

Affected products

• Quadro, NVS, and GeForce (all versions): before 3.18 — fixed in 3.18

How to fix

Upgrade to a fixed version: Quadro, NVS, and GeForce (all versions) 3.18. Check the vendor advisory for mitigations.

References

• http://support.lenovo.com/us/en/solutions/LEN-27096
• http://www.securityfocus.com/bid/107621
• https://nvidia.custhelp.com/app/answers/detail/a_id/4784
• http://support.lenovo.com/us/en/solutions/LEN-27096
• http://www.securityfocus.com/bid/107621
• https://nvidia.custhelp.com/app/answers/detail/a_id/4784

Get alerted when CVE-2019-5674 or the next vulnerability affects your stack