{"id":"CVE-2022-42260","details":"NVIDIA vGPU Display Driver for Linux guest contains a vulnerability in a D-Bus configuration file, where an unauthorized user in the guest VM can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.","modified":"2026-03-14T11:56:46.581586Z","published":"2022-12-30T23:15:11.097Z","references":[{"type":"ADVISORY","url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5415"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202310-02"}],"affected":[{"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-42260.json","unresolved_ranges":[{"events":[{"introduced":"0"},{"fixed":"11.11"}]},{"events":[{"introduced":"12.0"},{"fixed":"13.6"}]},{"events":[{"introduced":"14.0"},{"fixed":"14.4"}]},{"events":[{"introduced":"0"},{"fixed":"525.60.11"}]},{"events":[{"introduced":"470"},{"fixed":"470.161.03"}]},{"events":[{"introduced":"510"},{"fixed":"510.108.03"}]},{"events":[{"introduced":"450"},{"fixed":"450.216.04"}]},{"events":[{"introduced":"470"},{"fixed":"470.161.03"}]},{"events":[{"introduced":"510"},{"fixed":"510.108.03"}]},{"events":[{"introduced":"0"},{"fixed":"525.60.12"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}