CVE-2021-1052
High
Description
NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to denial of service, escalation of privileges, and information disclosure.
SeverityHigh
CVSS7.8
Exploit probability—
ProductNvidia Gpu Driver
PublishedJan 8, 2021
First seenJan 8, 2021
How to fix
Update
- nvidia gpu_driver392.63, 427.11, 452.77, 461.09, 390.141, 450.102.04, 460.32.03 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nvidia gpu_driver | 390 ≤ v < 392.63, 418 ≤ v < 427.11, 450 ≤ v < 452.77, 460 ≤ v < 461.09, 390 ≤ v < 390.141, 450 ≤ v < 450.102.04, 460 ≤ v < 460.32.03 | 392.63, 427.11, 452.77, 461.09, 390.141, 450.102.04, 460.32.03 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.