CVE-2021-1079

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-04-20 · updated 2026-06-17

Description

NVIDIA GeForce Experience, all versions prior to 3.22, contains a vulnerability in GameStream plugins where log files are created using NT/System level permissions, which may lead to code execution, denial of service, or local privilege escalation. The attacker does not have control over the consequence of a modification nor would they be able to leak information as a direct result of the overwrite.

Affected products

Quadro, NVS, and GeForce (all versions): before 3.22 — fixed in 3.22

How to fix

Upgrade to a fixed version: Quadro, NVS, and GeForce (all versions) 3.22. Check the vendor advisory for mitigations.

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5184
https://nvidia.custhelp.com/app/answers/detail/a_id/5184

Get alerted when CVE-2021-1079 or the next vulnerability affects your stack