CVE-2018-6263

HIGH

NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows in which an attacker who has access to a local user account can plant a malicious dynamic link library (D...

Affects 2 products across 2 vendors.

CVSS 3.07.8
EPSS0.3%
Percentile22th
PatchUnknown
CVSS Vector — Plain English Requires local access, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2018. A high severity vulnerability affects Microsoft systems (CVE-2018-6263). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2018-GLOBAL-130963-H • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2018-6263?
This vulnerability was disclosed in 2018. A high severity vulnerability affects Microsoft systems (CVE-2018-6263). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2018-6263?
CVE-2018-6263 has CVSS 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.3%.
Is CVE-2018-6263 actively exploited?
No confirmed active exploitation of CVE-2018-6263 as of 2026-05-30.
How do I remediate CVE-2018-6263?
Priority: MEDIUM.
What systems are affected by CVE-2018-6263?
CVE-2018-6263 affects Nvidia Geforce Experience.
Vulnerability Details
CVE IDCVE-2018-6263
BSIDBS-2018-GLOBAL-130963-H BreachSpider Global ID
CVSS VectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published2018-11-27
Last Modified2024-11-21
ICS Relevance0%
SourceNVD
Official Description

NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows in which an attacker who has access to a local user account can plant a malicious dynamic link library (DLL) during application installation, which may lead to escalation of privileges.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows in which an attacker who has access to a local user account can plant a malicious dynamic link library (DLL) during application installation, which may lead to escalation of privileges. CVSS vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Nvidia Geforce Experience < 3.16

Platforms listed by the source (the vulnerable product runs on these; they are not themselves vulnerable): Microsoft Windows

Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 2879 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash9559914c27e897b1f7364dd62f63283214d5cfb4de41329405ad16cb5c6a967a5d6a2e638fb0dd7bfb0785c873450c5882d6a42776bf34c0feb7dddf5fe9ca8c
Related CVEs affecting Nvidia
CVE-2013-5986 10.0 Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 31... CVE-2015-5053 10.0 The host memory mapping path feature in the NVIDIA GPU graphics driver R346 b... CVE-2019-5684 10.0 NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in ... CVE-2022-28181 9.9 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in t... CVE-2026-65083 9.9 NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioni...
View all Nvidia CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →