What’s Vulnerable › Vulnerabilities

CVE-2019-5676

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-05-10 · updated 2026-06-17
• Weakness: CWE-427

Description

NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), leading to escalation of privileges through code execution.

Affected products

• Quadro, NVS, and GeForce (all versions): before 3.19 — fixed in 3.19
• NVIDIA Guest driver: from 410 before 412.36; from 418 before 425.51; from 430 before 430.64 — fixed in 412.36, 425.51, 430.64

How to fix

Upgrade to a fixed version: Quadro, NVS, and GeForce (all versions) 3.19; NVIDIA Guest driver 412.36, 425.51, 430.64. Check the vendor advisory for mitigations.

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/4797
• https://nvidia.custhelp.com/app/answers/detail/a_id/4806
• https://nvidia.custhelp.com/app/answers/detail/a_id/4841
• https://support.lenovo.com/us/en/product_security/LEN-27815
• https://nvidia.custhelp.com/app/answers/detail/a_id/4797
• https://nvidia.custhelp.com/app/answers/detail/a_id/4806
• https://nvidia.custhelp.com/app/answers/detail/a_id/4841
• https://support.lenovo.com/us/en/product_security/LEN-27815

Get alerted when CVE-2019-5676 or the next vulnerability affects your stack