Security Advisories · nvaccess/nvda · GitHub

Security Advisories

View known security vulnerabilities and report new vulnerabilities privately to maintainers.

Report a vulnerability

Reflected XSS through browseableMessage
GHSA-xg6w-23rw-39r8 published Feb 4, 2024 by seanbudd

High
Privilege escalation and unauthenticated system access via clipboard error dialog
GHSA-h7pp-6jqw-g3pj published Jan 29, 2024 by seanbudd

High
Python console access via "forgot my PIN" reset screen
GHSA-fpwc-2gxx-j9v7 published Jan 3, 2023 by seanbudd

Moderate
Malicious add-on can hijack UAC Authorization
GHSA-727q-h8j2-6p45 published Mar 13, 2024 by seanbudd

Moderate
Report formatting dialog allows opening a shell on secure screens
GHSA-3jj9-295f-h69w published Jan 3, 2023 by seanbudd

Critical
Speech Viewer text cached on lock screen
GHSA-grvr-j2h8-3qm4 published Jan 3, 2023 by seanbudd

Low
Self-compiled dlls can be used for privilege escalation
GHSA-q7c2-pgqm-vvw5 published Jan 3, 2023 by seanbudd

High
Race condition between NVDA starting and Windows locking
GHSA-72mj-mqhj-qh4w published Jan 3, 2023 by seanbudd

High
Python console available on lock screen via log viewer
GHSA-585m-rpvv-93qg published Oct 3, 2022 by feerrenrut

Critical
Python Console from the lockscreen and object navigation to escape the lockscreen
GHSA-rmq3-vvhq-gp32 published Aug 18, 2022 by feerrenrut

Critical