CVE-2015-1170
The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346...
The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a "kernel administrator check," which allows local users to gain administrator privileges via unspecified API calls.
Exploit likelihood
What each source reports
NVD Score used
The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a "kernel administrator check," which allows local users to gain administrator privileges via unspecified API calls.
- Record
CVE-2015-1170- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a "kernel administrator check," which allows local users to gain administrator privileges via unspecified API calls.
- Record
CVE-2015-1170- Updated
- 2026-11-02
EUVDEUVD-2015-1312 No score
The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a "kernel administrator check," which allows local users to gain administrator privileges via unspecified API calls.
- Record
EUVD-2015-1312- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9q56-2pj7-p3j9 No score
The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346...
The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a "kernel administrator check," which allows local users to gain administrator privileges via unspecified API calls.
- Record
GHSA-9q56-2pj7-p3j9- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-1170 is a high vulnerability (CVSS 7.2) in Nvidia Gpu Driver R304, published March 6, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. No source names a fixed version.
References
marc.info?l=bugtraq&m=143013598825091&w=2
securitytracker.com/id/1032013
support.lenovo.com/product_security/nvidia_windows_privilege
nvidia.custhelp.com/app/answers/detail/a_id/3634
nvd.nist.gov/vuln/detail/CVE-2015-1170
github.com/advisories/GHSA-9q56-2pj7-p3j9