CVE-2021-1054: nvidia gpu_driver Incorrect Authorization
Vulnerability summary
CVE-2021-1054 is a medium (CVSS 5.5) Incorrect Authorization vulnerability in nvidia gpu_driver. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 17.9% of scored vulnerabilities.
Timeline
- 08-01-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
NVIDIA GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action, which may lead to denial of service.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.27%
Chance of exploitation in the next 30 days
Percentile
18%
Versus all other CVEs
30-day change
0.00 pp
From 0.27% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Nvidia2 products
- gpu_driver≥ 390, < 392.63 | ≥ 418, < 427.11 | ≥ 450, < 452.77 | ≥ 460, < 461.09
- nvidia gpu display driverAll
1 vendor · 2 products