Three very important security updates have been released by Nvidia regarding GeForce Experience. These updates must be done quickly because previous versions present significant security holes: service malfunction, unauthorized granting of privileges, information leaks and execution of malicious codes.
Security vulnerabilities in your computer are exploited by viruses and hackers to crash your hardware, execute malicious code or leak sensitive information. No one is safe from various vulnerabilities, hence the need to update their software regularly and as quickly as possible. 3 vulnerabilities are fixed by the latest GeForce Experience update.
What were the vulnerabilities?
Here are the summaries of these GeForce Experience :
- CVE ID – 2020‑5977: The flaw related to the NVIDIA Web Helper NodeJS web server. It consisted of a possibility of information leakage, execution of malicious codes or service malfunction. This vulnerability has a rating of 8.2.
- CVE ID – 2020‑5990: The flaw concerned the ShadowPlay component. It could also leak information, execute various malicious codes, obtain non-legitimate privileges and cause the whole thing to malfunction. The rating for this problem is 7.3.
- CVE ID – 2020‑5978: The flaw related to the folder created by nvcontainer.exe with the LOCAL_SYSTEM user which could cause the service to malfunction or the granting of unauthorized privileges. This security concern has a rating of 3.2.
Compared to the vulnerability notes, the first two flaws are quite dangerous. Indeed, these two flaws make it possible to execute malicious codes. Which explains these fairly high ratings. Privilege escalation (running as PC Administrator) and service malfunction are fairly minor issues. Given the flaws cited, especially for the first 2, it is therefore strongly recommended to quickly update GeForce Experience to the most recent version V 3.20.5.70 .
How is the update going?
To update GeForce Experience, simply open it. The update will then be done automatically if you are connected to the Internet. You can launch it via the start menu or right-click on the Nvidia icon in the status bar near the system clock. Unlike updating a graphics card driver, updating GeForce Experience can run seamlessly and can be done even with a game running. If necessary, you can also directly install the latest version of the GeForce Experience software, available on the Nvidia website.
It is always recommended to update your software regularly. You should also not forget to have an antivirus and an up-to-date system. Viruses can indeed exploit various security vulnerabilities to harm your hardware or steal various sensitive information found there.
