VULNERABILITY INTELLIGENCE
CVE-2021-1117
CVSS score4.7 MEDIUM
EPSS probability0.19%
CISA KEVNot currently listed
Published2021-10-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an attacker through specific configuration and with local unprivileged system access may cause improper input validation, which may lead to denial of service.
Weakness classification
- psirt@nvidia.com: CWE-129
- nvd@nist.gov: CWE-129
Primary references
- psirt@nvidia.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory