CVE-2021-1073
High
Description
NVIDIA GeForce Experience, all versions prior to 3.23, contains a vulnerability in the login flow when a user tries to log in by using a browser, while, at the same time, any other web page is loaded in other tabs of the same browser. In this situation, the web page can get access to the token of the user login session, leading to the possibility that the user’s account is compromised. This may lead to the targeted user’s data being accessed, altered, or lost.
SeverityHigh
CVSS8.3
Exploit probability—
ProductNvidia Geforce Experience
PublishedJun 25, 2021
First seenJun 25, 2021
How to fix
Update
- nvidia geforce_experience3.23 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nvidia geforce_experience | v < 3.23 | 3.23 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.