CVE-2020-5963
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process...
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure.
- Record
CVE-2020-5963- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure.
- Record
CVE-2020-5963- Updated
- 2026-11-02
EUVDEUVD-2020-27117 No score
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure.
- Record
EUVD-2020-27117- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3fx9-g477-r6f6 No score
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process...
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure.
- Record
GHSA-3fx9-g477-r6f6- Weakness
- CWE-269
- Updated
- 2026-11-02
OSV
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure.
- Record
CVE-2020-5963- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-5963
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure.
- Record
DEBIAN-CVE-2020-5963- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-5963
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure.
- Record
UBUNTU-CVE-2020-5963- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUSN-4404-1 No score
nvidia-graphics-drivers-390, nvidia-graphics-drivers-440 vulnerabilities
Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not properly perform access control when performing IPC. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2020-5963)
It was discovered that the UVM driver in the NVIDIA graphics driver contained a race condition. A local attacker could use this to cause a denial of service. (CVE-2020-5967)
It was discovered that the NVIDIA virtual GPU guest drivers contained an unspecified vulnerability that could potentially lead to privileged operation execution. An attacker could use this to cause a denial of service. (CVE-2020-5973)
- Record
USN-4404-1- Updated
- 2026-11-02
OSVUSN-4404-2 No score
linux kernel vulnerabilities
USN-4404-1 fixed vulnerabilities in the NVIDIA graphics drivers. This update provides the corresponding updates for the NVIDIA Linux DKMS kernel modules.
Original advisory details:
Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not properly perform access control when performing IPC. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2020-5963)
It was discovered that the UVM driver in the NVIDIA graphics driver contained a race condition. A local attacker could use this to cause a denial of service. (CVE-2020-5967)
It was discovered that the NVIDIA virtual GPU guest drivers contained an unspecified vulnerability that could potentially lead to privileged operation execution. An attacker could use this to cause a denial of service. (CVE-2020-5973)
- Record
USN-4404-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nvidia-graphics-driversDebian:12 |
before 440.100-1, plus listed versions 1.0.6629+1-21.0.7167-11.0.7174-11.0.7174-21.0.7174-3 Show 45 moreShow less1.0.7174-41.0.7664-11.0.7664-21.0.7667-11.0.7667-31.0.7676-11.0.7676-21.0.8174-11.0.8178-0bpo11.0.8178-11.0.8178-21.0.8178-31.0.8756-11.0.8756-21.0.8756-31.0.8756-41.0.8762-11.0.8762-21.0.8774-11.0.8774-21.0.8774-31.0.8774-41.0.8774-51.0.8774-61.0.8774-71.0.8776-11.0.8776-21.0.8776-31.0.8776-41.0.9625-11.0.9625-21.0.9631-11.0.9746-11.0.9746-21.0.9755-1100.14.06-1100.14.09-1100.14.11-1100.14.19-1169.07-1169.07-2169.09-1169.12-1169.12-2169.12-3 |
440.100-1 |
nvidia-graphics-driversDebian:13 |
before 440.100-1, plus listed versions 1.0.6629+1-21.0.7167-11.0.7174-11.0.7174-21.0.7174-3 Show 45 moreShow less1.0.7174-41.0.7664-11.0.7664-21.0.7667-11.0.7667-31.0.7676-11.0.7676-21.0.8174-11.0.8178-0bpo11.0.8178-11.0.8178-21.0.8178-31.0.8756-11.0.8756-21.0.8756-31.0.8756-41.0.8762-11.0.8762-21.0.8774-11.0.8774-21.0.8774-31.0.8774-41.0.8774-51.0.8774-61.0.8774-71.0.8776-11.0.8776-21.0.8776-31.0.8776-41.0.9625-11.0.9625-21.0.9631-11.0.9746-11.0.9746-21.0.9755-1100.14.06-1100.14.09-1100.14.11-1100.14.19-1169.07-1169.07-2169.09-1169.12-1169.12-2169.12-3 |
440.100-1 |
nvidia-graphics-driversDebian:14 |
before 440.100-1, plus listed versions 1.0.6629+1-21.0.7167-11.0.7174-11.0.7174-21.0.7174-3 Show 45 moreShow less1.0.7174-41.0.7664-11.0.7664-21.0.7667-11.0.7667-31.0.7676-11.0.7676-21.0.8174-11.0.8178-0bpo11.0.8178-11.0.8178-21.0.8178-31.0.8756-11.0.8756-21.0.8756-31.0.8756-41.0.8762-11.0.8762-21.0.8774-11.0.8774-21.0.8774-31.0.8774-41.0.8774-51.0.8774-61.0.8774-71.0.8776-11.0.8776-21.0.8776-31.0.8776-41.0.9625-11.0.9625-21.0.9631-11.0.9746-11.0.9746-21.0.9755-1100.14.06-1100.14.09-1100.14.11-1100.14.19-1169.07-1169.07-2169.09-1169.12-1169.12-2169.12-3 |
440.100-1 |
nvidia-graphics-drivers-390Ubuntu:18.04:LTS |
before 390.138-0ubuntu0.18.04.1, plus listed versions 390.25-0ubuntu1390.25-0ubuntu3390.25-0ubuntu4390.42-0ubuntu1390.48-0ubuntu1 Show 7 moreShow less390.48-0ubuntu2390.48-0ubuntu3390.77-0ubuntu0.18.04.1390.77-0ubuntu0.18.04.2390.116-0ubuntu0.18.04.1390.116-0ubuntu0.18.04.3390.132-0ubuntu0.18.04.1 |
390.138-0ubuntu0.18.04.1 |
nvidia-graphics-drivers-440Ubuntu:18.04:LTS |
before 440.100-0ubuntu0.18.04.1, plus listed versions 440.59-0ubuntu0.18.04.1 |
440.100-0ubuntu0.18.04.1 |
nvidia-graphics-drivers-390Ubuntu:20.04:LTS |
before 390.138-0ubuntu0.20.04.1, plus listed versions 390.129-0ubuntu2390.132-0ubuntu1390.132-0ubuntu2 |
390.138-0ubuntu0.20.04.1 |
nvidia-graphics-drivers-440Ubuntu:20.04:LTS |
before 440.100-0ubuntu0.20.04.1, plus listed versions 440.31-0ubuntu1440.36-0ubuntu1440.44-0ubuntu1440.44-0ubuntu2440.59-0ubuntu1 Show 8 moreShow less440.59-0ubuntu2440.64-0ubuntu1440.64-0ubuntu2440.64-0ubuntu3440.82-0ubuntu1440.82+really.440.64-0ubuntu4440.82+really.440.64-0ubuntu5440.82+really.440.64-0ubuntu6 |
440.100-0ubuntu0.20.04.1 |
nvidia-graphics-drivers-390Ubuntu:18.04:LTS From an advisory covering 3 CVEs |
before 390.138-0ubuntu0.18.04.1, plus listed versions 390.25-0ubuntu1390.25-0ubuntu3390.25-0ubuntu4390.42-0ubuntu1390.48-0ubuntu1 Show 7 moreShow less390.48-0ubuntu2390.48-0ubuntu3390.77-0ubuntu0.18.04.1390.77-0ubuntu0.18.04.2390.116-0ubuntu0.18.04.1390.116-0ubuntu0.18.04.3390.132-0ubuntu0.18.04.1 |
390.138-0ubuntu0.18.04.1 |
nvidia-graphics-drivers-440Ubuntu:18.04:LTS From an advisory covering 3 CVEs |
before 440.100-0ubuntu0.18.04.1, plus listed versions 440.59-0ubuntu0.18.04.1 |
440.100-0ubuntu0.18.04.1 |
nvidia-graphics-drivers-390Ubuntu:20.04:LTS From an advisory covering 3 CVEs |
before 390.138-0ubuntu0.20.04.1, plus listed versions 390.129-0ubuntu2390.132-0ubuntu1390.132-0ubuntu2 |
390.138-0ubuntu0.20.04.1 |
Show 16 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nvidia-graphics-drivers-440Ubuntu:20.04:LTS From an advisory covering 3 CVEs |
before 440.100-0ubuntu0.20.04.1, plus listed versions 440.31-0ubuntu1440.36-0ubuntu1440.44-0ubuntu1440.44-0ubuntu2440.59-0ubuntu1 Show 8 moreShow less440.59-0ubuntu2440.64-0ubuntu1440.64-0ubuntu2440.64-0ubuntu3440.82-0ubuntu1440.82+really.440.64-0ubuntu4440.82+really.440.64-0ubuntu5440.82+really.440.64-0ubuntu6 |
440.100-0ubuntu0.20.04.1 |
linuxUbuntu:18.04:LTS From an advisory covering 3 CVEs |
before 4.15.0-108.109, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107 |
4.15.0-108.109 |
linux-awsUbuntu:18.04:LTS From an advisory covering 3 CVEs |
before 4.15.0-1076.80, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 39 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.77 |
4.15.0-1076.80 |
linux-aws-5.3Ubuntu:18.04:LTS From an advisory covering 3 CVEs |
before 5.3.0-1028.30~18.04.1, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.1 |
5.3.0-1028.30~18.04.1 |
linux-azure-5.3Ubuntu:18.04:LTS From an advisory covering 3 CVEs |
before 5.3.0-1031.32~18.04.1, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 7 moreShow less5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.1 |
5.3.0-1031.32~18.04.1 |
linux-gcp-5.3Ubuntu:18.04:LTS From an advisory covering 3 CVEs |
before 5.3.0-1029.31~18.04.1, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 5 moreShow less5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.1 |
5.3.0-1029.31~18.04.1 |
linux-hweUbuntu:18.04:LTS From an advisory covering 3 CVEs |
before 5.3.0-61.55~18.04.1, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 24 moreShow less4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.1 |
5.3.0-61.55~18.04.1 |
linux-oemUbuntu:18.04:LTS From an advisory covering 3 CVEs |
before 4.15.0-1090.100, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 34 moreShow less4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.97 |
4.15.0-1090.100 |
linux-oem-osp1Ubuntu:18.04:LTS From an advisory covering 3 CVEs |
before 5.0.0-1062.67, plus listed versions 5.0.0-1010.115.0.0-1012.135.0.0-1015.165.0.0-1018.205.0.0-1020.22 Show 16 moreShow less5.0.0-1022.245.0.0-1024.275.0.0-1025.285.0.0-1027.315.0.0-1028.325.0.0-1030.345.0.0-1033.385.0.0-1037.425.0.0-1039.445.0.0-1040.455.0.0-1043.485.0.0-1046.515.0.0-1047.525.0.0-1050.555.0.0-1052.575.0.0-1059.64 |
5.0.0-1062.67 |
linux-oracleUbuntu:18.04:LTS From an advisory covering 3 CVEs |
before 4.15.0-1047.51, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 20 moreShow less4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.49 |
4.15.0-1047.51 |
linux-oracle-5.3Ubuntu:18.04:LTS From an advisory covering 3 CVEs |
before 5.3.0-1027.29~18.04.1, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.15.3.0-1024.26~18.04.1 |
5.3.0-1027.29~18.04.1 |
linuxUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 5.4.0-39.43, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 8 moreShow less5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.41 |
5.4.0-39.43 |
linux-awsUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 5.4.0-1017.17, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 5 moreShow less5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.15 |
5.4.0-1017.17 |
linux-azureUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 5.4.0-1019.19, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 4 moreShow less5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.16 |
5.4.0-1019.19 |
linux-gcpUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 5.4.0-1018.18, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 4 moreShow less5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.15 |
5.4.0-1018.18 |
linux-oracleUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 5.4.0-1018.18, plus listed versions 5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7 Show 4 moreShow less5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.15 |
5.4.0-1018.18 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-5963 is a high vulnerability (CVSS 7.8) in Nvidia Gpu Display Driver, published June 24, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 40th percentile. Fixed in nvidia-graphics-drivers 440.100-1.
References
Left out here: 1,221 versions. The JSON record has them.