NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of service, or escalation of privileges.
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon
- https://github.com/H4cksploit/CVEs-master
- https://github.com/RhinoSecurityLabs/CVEs
- https://github.com/alphaSeclab/sec-daily-2019
- https://github.com/merlinepedra/RHINOECURITY-CVEs
- https://github.com/merlinepedra25/RHINOSECURITY-CVEs
- https://github.com/sunzu94/AWS-CVEs