Medium severity6.7NVD Advisory· Published May 10, 2019· Updated Jun 17, 2026

CVE-2019-5676

Description

NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), leading to escalation of privileges through code execution.

Affected products

Nvidia/Geforce Experience
cpe:2.3:a:nvidia:geforce_experience:*:*:*:*:*:*:*:*
Range: <3.19
Nvidia/Display Driver2 versions
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*+ 1 more
- cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*range: >=410,<412.36
- (no CPE)range: All
Nvidia/Windows GPU Display driver softwarellm-create

Patches

Vulnerability mechanics

References

nvidia.custhelp.com/app/answers/detail/a_id/4797nvdVendor Advisory
nvidia.custhelp.com/app/answers/detail/a_id/4806nvdVendor Advisory
nvidia.custhelp.com/app/answers/detail/a_id/4841nvdVendor Advisory
support.lenovo.com/us/en/product_security/LEN-27815nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000