CVE-2021-1092

Severity: high (CVSS 7.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-07-22 · updated 2026-06-17
Weakness: CWE-59

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the NVIDIA Control Panel application where it is susceptible to a Windows file system symbolic link attack where an unprivileged attacker can cause the applications to overwrite privileged files, resulting in potential denial of service or data loss.

Affected products

NVIDIA Guest driver: from 427.33 before 427.48; from 452.96 before 453.10; from 462.31 before 462.96 — fixed in 427.48, 453.10, 462.96

How to fix

Upgrade to a fixed version: NVIDIA Guest driver 427.48, 453.10, 462.96. Check the vendor advisory for mitigations.

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5211
https://nvidia.custhelp.com/app/answers/detail/a_id/5211

Get alerted when CVE-2021-1092 or the next vulnerability affects your stack