CVE-2021-1074
High
Description
NVIDIA GPU Display Driver for Windows installer contains a vulnerability where an attacker with local unprivileged system access may be able to replace an application resource with malicious files. This attack requires a user with system administration rights to execute the installer and requires the attacker to replace the files in a very short time window between file integrity validation and execution. Such an attack may lead to code execution, escalation of privileges, denial of service, and information disclosure.
SeverityHigh
CVSS7.3
Exploit probability—
ProductNvidia Gpu Display Driver
PublishedApr 21, 2021
First seenApr 21, 2021
How to fix
Update
- nvidia gpu_display_driver392.65 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nvidia gpu_display_driver | 390 ≤ v < 392.65 | 392.65 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.