Vulnerability · Published Jul 22, 2021 · Assigned by nvidia

CVE-2021-1092

High 7.1

In plain English

A high-severity security flaw in NVIDIA GPU Display Driver from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).

Severity (CVSS 3.1)7.1High

Exploit odds (30 days)0.3%top 82.2% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the NVIDIA Control Panel application where it is susceptible to a Windows file system symbolic link attack where an unprivileged attacker can cause the applications to overwrite privileged files, resulting in potential denial of service or data loss.

Affected products (as reported)

Vendor	Product	Versions
NVIDIA	NVIDIA GPU Display Driver	All GPU Driver versions

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5211 x_refsource_CONFIRM