CVE-2021-1052

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-01-08 · updated 2026-06-17

Description

NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to denial of service, escalation of privileges, and information disclosure.

Affected products

Nvidia Corporation GPU Display Driver: from 390 before 392.63; from 418 before 427.11; from 450 before 452.77; from 460 before 461.09; from 390 before 390.141; from 450 before 450.102.04 — fixed in 390.141, 392.63, 427.11, 450.102.04, 452.77, 460.32.03

How to fix

Upgrade to a fixed version: Nvidia Corporation GPU Display Driver 390.141, 392.63, 427.11, 450.102.04. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-1052 or the next vulnerability affects your stack