CVE-2021-1075

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-04-21 · updated 2026-06-17
Weakness: CWE-476

Description

NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of service, or escalation of privileges. Attacker does not have any control over the information and may conduct limited data modification.

Affected products

NVIDIA Guest driver: from 418 before 427.33; from 450 before 452.96; from 460 before 462.31; from 465 before 466.11 — fixed in 427.33, 452.96, 462.31, 466.11

How to fix

Upgrade to a fixed version: NVIDIA Guest driver 427.33, 452.96, 462.31, 466.11. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-1075 or the next vulnerability affects your stack