CVE-2019-5674

CVE-2019-5674 is a high-severity vulnerability affecting NVIDIA GeForce Experience versions prior to 3.18, specifically when ShadowPlay or GameStream are enabled. It stems from a hard link attack vulnerability, allowing an attacker with local system access to achieve code execution, denial of service, or privilege escalation. The CVSS score is 7.0 (High), indicating a local attack vector with high impact on confidentiality, integrity, and availability, though with high attack complexity. While there is no known exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion and media coverage, suggesting awareness among threat actors. There is no evidence of active exploitation in the wild, and it is not listed in CISA's KEV catalog.