CVE Feed

    Dashboard / CVE / CVE-2016-7382

    CVE-2016-7382

    For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.

    Published:Nov 8, 2016
    Last Modified:Apr 12, 2025
    EPS:Nov 8, 2016
    EPSS Score:0.00048
    CVSS Score:7.8

    Affected Products

    Vendor
    Nvidia
    Product
    Geforce 910m
    Vendor
    Nvidia
    Product
    Geforce 920m
    Vendor
    Nvidia
    Product
    Geforce 920mx
    Vendor
    Nvidia
    Product
    Geforce 930m
    Vendor
    Nvidia
    Product
    Geforce 930mx
    Vendor
    Nvidia
    Product
    Geforce 940m
    Vendor
    Nvidia
    Product
    Geforce 940mx
    Vendor
    Nvidia
    Product
    Geforce 945m
    Vendor
    Nvidia
    Product
    Geforce Gt 710
    Vendor
    Nvidia
    Product
    Geforce Gt 730
    Vendor
    Nvidia
    Product
    Geforce Gtx 1050
    Vendor
    Nvidia
    Product
    Geforce Gtx 1060
    Vendor
    Nvidia
    Product
    Geforce Gtx 1070
    Vendor
    Nvidia
    Product
    Geforce Gtx 1080
    Vendor
    Nvidia
    Product
    Geforce Gtx 950m
    Vendor
    Nvidia
    Product
    Geforce Gtx 960m
    Vendor
    Nvidia
    Product
    Geforce Gtx 965m
    Vendor
    Nvidia
    Product
    Gpu Driver
    Vendor
    Nvidia
    Product
    Nvs 310
    Vendor
    Nvidia
    Product
    Nvs 315
    Vendor
    Nvidia
    Product
    Nvs 510
    Vendor
    Nvidia
    Product
    Nvs 810
    Vendor
    Nvidia
    Product
    Quadro K1200
    Vendor
    Nvidia
    Product
    Quadro K420
    Vendor
    Nvidia
    Product
    Quadro K620
    Vendor
    Nvidia
    Product
    Quadro M1000m
    Vendor
    Nvidia
    Product
    Quadro M2000
    Vendor
    Nvidia
    Product
    Quadro M2000m
    Vendor
    Nvidia
    Product
    Quadro M3000m
    Vendor
    Nvidia
    Product
    Quadro M4000
    Vendor
    Nvidia
    Product
    Quadro M4000m
    Vendor
    Nvidia
    Product
    Quadro M5000
    Vendor
    Nvidia
    Product
    Quadro M5000m
    Vendor
    Nvidia
    Product
    Quadro M500m
    Vendor
    Nvidia
    Product
    Quadro M5500
    Vendor
    Nvidia
    Product
    Quadro M6000
    Vendor
    Nvidia
    Product
    Quadro M600m
    Vendor
    Nvidia
    Product
    Quadro P5000
    Vendor
    Nvidia
    Product
    Quadro P6000
    Vendor
    Nvidia
    Product
    Telsa K80
    Vendor
    Nvidia
    Product
    Tesla C2050
    Vendor
    Nvidia
    Product
    Tesla C2070
    Vendor
    Nvidia
    Product
    Tesla C2075
    Vendor
    Nvidia
    Product
    Tesla K10
    Vendor
    Nvidia
    Product
    Tesla K20
    Vendor
    Nvidia
    Product
    Tesla K20x
    Vendor
    Nvidia
    Product
    Tesla K40
    Vendor
    Nvidia
    Product
    Tesla K8
    Vendor
    Nvidia
    Product
    Tesla K80
    Vendor
    Nvidia
    Product
    Tesla M2050
    Vendor
    Nvidia
    Product
    Tesla M2070
    Vendor
    Nvidia
    Product
    Tesla M2075
    Vendor
    Nvidia
    Product
    Tesla M2090
    Vendor
    Nvidia
    Product
    Tesla M40
    Vendor
    Nvidia
    Product
    Tesla M6
    Vendor
    Nvidia
    Product
    Tesla M60
    Vendor
    Nvidia
    Product
    Tesla P100
    Vendor
    Nvidia
    Product
    Tesla P4
    Vendor
    Nvidia
    Product
    Tesla P40
    Vendor
    Nvidia
    Product
    Titan X

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2016-5852 (CVSS 7.8) — For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulne…
    CVE-2016-4960 (CVSS 7.3) — For the NVIDIA Quadro, NVS, and GeForce products, the NVIDIA NVStreamKMS.sys service component is improperly v…
    CVE-2016-4961 (CVSS 5.5) — For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVStreamKMS.sys A…
    CVE-2016-5025 (CVSS 6.6) — For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVAPI support lay…
    CVE-2016-8812 (CVSS 8.8) — For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R37…
    CVE-2016-3161 (CVSS 7.8) — For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulne…
    CVE-2016-4959 (CVSS 7.5) — For the NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service. A successful ex…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High