Security: nvaccess/nvda
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Reflected XSS through browseableMessageGHSA-xg6w-23rw-39r8 published
Feb 4, 2024 by seanbuddHigh -
Privilege escalation and unauthenticated system access via clipboard error dialogGHSA-h7pp-6jqw-g3pj published
Jan 29, 2024 by seanbuddHigh -
Python console access via "forgot my PIN" reset screenGHSA-fpwc-2gxx-j9v7 published
Jan 3, 2023 by seanbuddModerate -
Malicious add-on can hijack UAC AuthorizationGHSA-727q-h8j2-6p45 published
Mar 13, 2024 by seanbuddModerate -
Report formatting dialog allows opening a shell on secure screensGHSA-3jj9-295f-h69w published
Jan 3, 2023 by seanbuddCritical -
Speech Viewer text cached on lock screenGHSA-grvr-j2h8-3qm4 published
Jan 3, 2023 by seanbuddLow -
Self-compiled dlls can be used for privilege escalationGHSA-q7c2-pgqm-vvw5 published
Jan 3, 2023 by seanbuddHigh -
Race condition between NVDA starting and Windows lockingGHSA-72mj-mqhj-qh4w published
Jan 3, 2023 by seanbuddHigh -
Python console available on lock screen via log viewerGHSA-585m-rpvv-93qg published
Oct 3, 2022 by feerrenrutCritical -
Python Console from the lockscreen and object navigation to escape the lockscreenGHSA-rmq3-vvhq-gp32 published
Aug 18, 2022 by feerrenrutCritical