Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-1117

Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an attacker through specific configuration and with local unprivileged system access may cause improper input validation, which may lead to denial of service.

Published

2021-10-27T21:15:07.553

Last Modified

2024-11-21T05:43:37.857

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.7 (MEDIUM)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:N/I:N/A:P

  • Access Vector: LOCAL
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

3.4

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-129
  • Type: Primary
    CWE-129
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nvidia gpu_display_driver < 392.68 Yes
Application nvidia gpu_display_driver < 463.15 Yes
Application nvidia gpu_display_driver < 472.39 Yes
Application nvidia gpu_display_driver < 496.49 Yes
References