CVE-2024-0096
 
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track*
*SSVC
Descriptions
NVIDIA ChatRTX for Windows contains a vulnerability in Chat RTX UI, where a user can cause an improper privilege management issue by sending user inputs to change execution flow. A successful exploit of this vulnerability might lead to information disclosure, escalation of privileges, and data tampering.
NVIDIA ChatRTX para Windows contiene una vulnerabilidad en la interfaz de usuario de Chat RTX, donde un usuario puede causar un problema de administración de privilegios inadecuado al enviar entradas del usuario para cambiar el flujo de ejecución. Una explotación exitosa de esta vulnerabilidad podría dar lugar a la divulgación de información, la escalada de privilegios y la manipulación de datos.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track*
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-12-02 CVE Reserved
- 2024-05-09 CVE Published
- 2024-05-10 EPSS Updated
- 2024-08-01 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-269: Improper Privilege Management
CAPEC
References (1)
URL | Tag | Source |
---|---|---|
https://nvidia.custhelp.com/app/answers/detail/a_id/5533 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|