CVE-2019-5674

7.0 highEPSS 1.2%

High (7.0) in nvidia geforce experience. EPSS 1.2% chance of exploitation in the next 30 days.

NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of service, or escalation of privileges.

Severity

CVSS 3.0

7.0 high

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-11-01)
CWE: CWE-59
Published: 2019-03-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nvidia:geforce_experience

References

http://support.lenovo.com/us/en/solutions/LEN-27096
http://www.securityfocus.com/bid/107621
https://nvidia.custhelp.com/app/answers/detail/a_id/4784
http://support.lenovo.com/us/en/solutions/LEN-27096
http://www.securityfocus.com/bid/107621

Check your stack JSON