CVE-2021-1117

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-10-27 · updated 2026-06-17
Weakness: CWE-129

Description

Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an attacker through specific configuration and with local unprivileged system access may cause improper input validation, which may lead to denial of service.

Affected products

NVIDIA Guest driver: from 390 before 392.68; from 460 before 463.15; from 470 before 472.39; from 495 before 496.49 — fixed in 392.68, 463.15, 472.39, 496.49

How to fix

Upgrade to a fixed version: NVIDIA Guest driver 392.68, 463.15, 472.39, 496.49. Check the vendor advisory for mitigations.

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5230
https://nvidia.custhelp.com/app/answers/detail/a_id/5230

Get alerted when CVE-2021-1117 or the next vulnerability affects your stack