CVE-2021-1074

CVE-2021-1074 is a high-severity vulnerability in Nvidia Gpu Display Driver with a CVSS 3.x base score of 7.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Description

NVIDIA GPU Display Driver for Windows installer contains a vulnerability where an attacker with local unprivileged system access may be able to replace an application resource with malicious files. This attack requires a user with system administration rights to execute the installer and requires the attacker to replace the files in a very short time window between file integrity validation and execution. Such an attack may lead to code execution, escalation of privileges, denial of service, and information disclosure.

Frequently asked questions

What is CVE-2021-1074?
NVIDIA GPU Display Driver for Windows installer contains a vulnerability where an attacker with local unprivileged system access may be able to replace an application resource with malicious files. This attack requires a user with system administration rights to execute the installer and requires the attacker to replace the files in a very short time window between file integrity validation and execution. Such an attack may lead to code execution, escalation of privileges, denial of service, and information disclosure.
How severe is CVE-2021-1074?
CVE-2021-1074 has a CVSS 3.x base score of 7.3, rated high severity. It is exploitable over local access with low attack complexity, requires low privileges and user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2021-1074 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (39th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2021-1074?
CVE-2021-1074 affects Nvidia Gpu Display Driver. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2021-1074?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2021-1074 published?
CVE-2021-1074 was published on 2021-04-21 and last updated on 2026-06-17.

References

Affected products (1)

More vulnerabilities in Nvidia Gpu Display Driver

All CVEs affecting Nvidia Gpu Display Driver →