CVE-2022-28181

CRITICAL

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a speci...

Affects 4 products across 3 vendors.

CVSS 3.19.9
EPSS1.1%
Percentile66th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, can impact systems beyond the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-787: Out-of-Bounds Write

Software writes data past buffer boundaries, corrupting memory and potentially enabling code execution.

◆ AI Analysis — automated analysis, not human-reviewed

NVIDIA GPU Display Driver for Windows and Linux contains a critical vulnerability in the kernel mode layer that can be exploited by an unprivileged user to cause an out-of-bounds write, potentially leading to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

BSID: BS-2022-GLOBAL-068530-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2022-28181?
NVIDIA GPU Display Driver for Windows and Linux contains a critical vulnerability in the kernel mode layer that can be exploited by an unprivileged user to cause an out-of-bounds write, potentially leading to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
What is the CVSS score for CVE-2022-28181?
CVE-2022-28181 has CVSS 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS: 1.1%.
Is CVE-2022-28181 actively exploited?
No confirmed active exploitation of CVE-2022-28181 as of 2026-09-25.
How do I remediate CVE-2022-28181?
Priority: IMMEDIATE. PSIRT: [email protected]
What systems are affected by CVE-2022-28181?
CVE-2022-28181 affects Nvidia Gpu Display Driver, Virtual Gpu.
Vulnerability Details
CVE IDCVE-2022-28181
BSIDBS-2022-GLOBAL-068530-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Published2022-05-17
Last Modified2026-06-17
ICS Relevance0%
Weakness (CWE)
Out-of-Bounds Write
SourceNVD
Official Description

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An unprivileged regular user on the network can exploit a specially crafted shader to cause an out-of-bounds write in the kernel mode layer of the NVIDIA GPU Display Driver.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductAffected Versions
Nvidia Gpu Display Driver No version listed by source
Nvidia Virtual Gpu 14.0 ≥ 11.0, < 11.8 ≥ 13.0, < 13.3

Platforms listed by the source (the vulnerable product runs on these; they are not themselves vulnerable): Linux Linux Kernel, Microsoft Windows

Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 1612 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hashba00840947e05c0a43937a2a79f7a8c939b61621530b82e935e4aa5962d7037497a8b67dcd3ad74c74b78e36d329094d58fb5b6b64d85c2c567c1354f0f581e9
Related CVEs affecting Nvidia
CVE-2013-5986 10.0 Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 31... CVE-2015-5053 10.0 The host memory mapping path feature in the NVIDIA GPU graphics driver R346 b... CVE-2019-5684 10.0 NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in ... CVE-2026-65083 9.9 NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioni... CVE-2026-65093 9.9 NVIDIA OpenShell for Linux contains a vulnerability where an attacker could c...
View all Nvidia CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.9 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →