CVE-2016-5852
Estado: ModificadaAlta (7.8)—
For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system at the system/user privilege level. The CVE-2016-5852 ID is for the NVTray Plugin unquoted service path.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.39%
- Percentil entre todas las CVEs puntuadas: 31
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-Other
Referencias
- http://nvidia.custhelp.com/app/answers/detail/a_id/4213
- http://www.securityfocus.com/bid/93251
- https://support.lenovo.com/us/en/product_security/ps500070
- http://nvidia.custhelp.com/app/answers/detail/a_id/4213
- http://www.securityfocus.com/bid/93251
- https://support.lenovo.com/us/en/product_security/ps500070
JSON original (NVD)
Mostrar
{
"id": "CVE-2016-5852",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.2,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "psirt@nvidia.com",
"affectedData": [
{
"vendor": "n/a",
"product": "Quadro, NVS, GeForce (all versions)",
"versions": [
{
"status": "affected",
"version": "Quadro, NVS, GeForce (all versions)"
}
]
}
]
}
],
"published": "2016-11-08T20:59:05.787",
"references": [
{
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4213",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@nvidia.com"
},
{
"url": "http://www.securityfocus.com/bid/93251",
"source": "psirt@nvidia.com"
},
{
"url": "https://support.lenovo.com/us/en/product_security/ps500070",
"source": "psirt@nvidia.com"
},
{
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4213",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/93251",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://support.lenovo.com/us/en/product_security/ps500070",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system at the system/user privilege level. The CVE-2016-5852 ID is for the NVTray Plugin unquoted service path."
},
{
"lang": "es",
"value": "Para los productos NVIDIA Quadro, NVS y GeForce, vulnerabilidades de ruta de servicio no citadas GFE GameStream y NVTray Plugin son ejemplos de la vulnerabilidad de ruta de servicio no citado en Windows. Una explotación exitosa de una instalación de servicio vulnerable puede habilitar código malicioso para ejecutar en el sistema en el nivel de privilegios sistema/usuario. La ID CVE-2016-5852 es para la ruta de servicio no citada NVTray Plugin."
}
],
"lastModified": "2026-06-17T00:50:08.923",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nvidia:geforce_experience:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F36E098A-0BCE-41CF-8AF6-3C32E18C8256",
"versionEndIncluding": "-"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:geforce_910m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C6C6E52F-EE00-4CE3-B9F9-0ED847DE3FB9"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_920m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "26641568-53CE-4606-B2CA-C25A97795A50"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_920mx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "02BAA7E2-E4F5-44C9-BEDF-7425B0C56578"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_930m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "05A831E4-1119-45F0-B9A0-4D948ECD47E6"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_930mx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1F50D6AC-3D1E-4E54-8422-B717456F6257"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_940m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "03CBD29C-A606-45DE-B2FB-8572B986A4F0"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_940mx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "44BF5DC1-4609-4F34-9511-785F7B119ADE"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_945m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3724F083-A7FC-4069-AC35-FB8AA08B6CCD"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gt_710:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1B72BBAC-CEBD-4405-B1EC-7535794FF5EB"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gt_730:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A2C9365F-B4A5-4EA2-917B-2F07457017EB"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gtx_1050:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D835EE77-6031-40D6-8305-F962F42E7018"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gtx_1060:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F0ED6F8E-1F82-4C50-9EEF-A5F58DB440AD"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gtx_1070:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E884CEDD-CAA5-489D-A526-B628BB3DE460"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gtx_1080:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9E3455DE-4408-4603-86B2-5ECE76ED459C"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gtx_950m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C29EDF54-BEA4-49B4-96E9-CDE62F38E3DF"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gtx_960m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3EAB33B6-E270-4C11-8E57-2BE127C86134"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gtx_965m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AF0C08C8-AC1B-4A01-903A-FB56B75CAE55"
},
{
"criteria": "cpe:2.3:h:nvidia:nvs_310:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2B376C04-8A35-42E7-8937-1A466E89639A"
},
{
"criteria": "cpe:2.3:h:nvidia:nvs_315:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F13EE983-724F-472B-BCF5-B416D1DF27E1"
},
{
"criteria": "cpe:2.3:h:nvidia:nvs_510:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CBDF0898-E092-42BA-A777-FB7C5FFC4D3C"
},
{
"criteria": "cpe:2.3:h:nvidia:nvs_810:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "41B48700-10AB-4194-94BC-D0F177D0B56A"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_k1200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B84A5C10-5B3E-48F1-8F66-4B9EE9C78D24"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_k420:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BD3B7EE4-080F-4E3C-8304-0837AC20ECCD"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_k620:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7E03A4C2-72EF-44FC-9F97-626C8E8A17EA"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m1000m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3896B47E-8787-45D2-96B3-BF4892780F35"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m2000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "316C9573-7C7D-4429-8563-B74FD752AC51"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m2000m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6FEC13EF-BB2F-4ED2-BC8B-8234ABAEEE02"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m3000m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B5E13B65-F61B-44D4-B1D7-1E96D9CB45BD"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m4000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "76ABA317-6621-4D57-874F-307451EC9C2E"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m4000m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "477D72B5-A3EA-440A-B495-8A09E8564E8D"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m5000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F2B507EE-F005-4806-A8FC-8C8D9A31B0DB"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m5000m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DAD67DC6-AA36-4F93-B8DB-77EB8C153BCA"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m500m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E707A80B-6482-47DD-8BF3-6E58BC2C697A"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m5500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0E8D2AC7-DC75-4BBA-BF4E-58BF88B49B11"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m6000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "ED233BC3-6982-41E1-9205-5159C17A4A56"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m600m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7C186F38-89C7-4616-A424-201804F842C9"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_p5000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DCDC421C-3B8F-4EAA-A2D4-14C14CD7F3DB"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_p6000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "60176B23-2751-4415-A0D3-DF1BE640F6C3"
},
{
"criteria": "cpe:2.3:h:nvidia:titan_x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2FABA79A-A70A-40A5-ADA7-893EAB42FE9E"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/428.html\">CWE-428: Unquoted Search Path or Element</a>",
"sourceIdentifier": "psirt@nvidia.com"
}