SECURITY researcher Chaotic Eclipse (also known as INFINITE NIGHTMARE, MSNightmare and Nightmare-Eclipse) has released a proof-of-concept exploit named GreenSection targeting Nvidia’s Windows user-mode components. The flaw centres on a shared global memory section used by multiple Nvidia components, which grants full read/write access to all users. Although checks are performed at execution time, the data stored in this shared memory is reused at runtime, enabling an out-of-bounds memory write.
The researcher notes the bug does not immediately grant SYSTEM privileges, but could be leveraged to cross user boundaries or even compromise the Windows Desktop Window Manager (dwm[.]exe). The discovery is framed as a potential stepping stone for a fuller exploit rather than an immediate full compromise.
A simple PoC is provided: run an application using Vulkan or OpenGL, execute the PoC, press Enter, and observe the application crash. The researcher cautions that while the vulnerability does not automatically yield SYSTEM-level access, it could facilitate cross‑session abuse or destabilise the dwm process, with the possibility of broader impact if exploited further.
The disclosure follows Chaotic Eclipse’s pattern of releasing PoCs for zero-days affecting security products, and the piece also notes prior demonstrations against antivirus and EDR products. The report discusses the broader context of the researcher’s activity and raises questions about the practical real-world risk until vendors assess and mitigate the vulnerability.