Nvidia Fixes 3 Serious Security Flaws — What to Do Now

Nvidia Fixes 3 Serious Security Flaws — What to Do Now

Almost a month has passed since the last Nvidia security patch, and lo and behold, another security patch has been released.

On October 22, the graphics card manufacturer announced that versions of its GeForce Experience software prior to 3.20.5.70 contained three security flaws ranging from a very serious "uncontrolled search path" that could be used to load malicious software to a relatively minor A security bulletin was issued warning of three security flaws, ranging from a privilege escalation issue.

None of these flaws can be exploited remotely via the Internet; the attacker must have access to the system. However, that attacker could be malware that infects the machine in other ways, such as an email attachment or a Trojanized plug-in or extension.

GeForce Experience is Nvidia's desktop interface for GeForce graphics card users. The Experience allows users to share live streams and videos, manage drivers and supported games, etc.

Nvidia provides many security patches, which is not necessarily a bad thing since it means that developers are having a ball. It is better to have many patches than none at all.

To update your GeForce Experience software, simply open the software and it will automatically update to version 3.20.5.70. (You can find the version number in Settings->General). If that does not work, you can download the latest version of the software from the GeForce Experience page on the Nvidia website.

Categories