CVE-2021-1078

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-04-21 · updated 2026-06-17
Weakness: CWE-476

Description

NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel driver (nvlddmkm.sys) where a NULL pointer dereference may lead to system crash.

Affected products

NVIDIA Guest driver: from 390 before 392.65; from 418 before 427.33; from 450 before 452.96; from 460 before 462.31; from 465 before 466.11 — fixed in 392.65, 427.33, 452.96, 462.31, 466.11

How to fix

Upgrade to a fixed version: NVIDIA Guest driver 392.65, 427.33, 452.96, 462.31. Check the vendor advisory for mitigations.

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5172
https://nvidia.custhelp.com/app/answers/detail/a_id/5172

Get alerted when CVE-2021-1078 or the next vulnerability affects your stack