BIOS PrivEsc Bugs Affect Hundreds of Millions of Dell PCs Worldwide

PC maker Dell has issued an update to fix multiple critical privilege escalation vulnerabilities that went undetected since 2009, potentially allowing attackers to gain kernel-mode privileges and cause a denial-of-service condition. The issues, reported to Dell by researchers from SentinelOne on...

Dell DBUtil_2_3.sys IOCTL memmove

The DBUtil23.sys driver distributed by Dell exposes an unprotected IOCTL interface that can be abused by an attacker read and write kernel-mode memory. Module Options msf use exploit/windows/local/cve/202121551dbutilmemmove msf undefined202121551dbutilmemmove show actions ...actions... msf...

Updated nvidia390 packages fix security vulnerabilities

Updated nvidia390 packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko where improper access control may lead to denial of service, information disclosure, or data corruption CVE-2021-1076. It also fixes a bug where...

CVE-2021-1084

NVIDIA vGPU driver contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager vGPU plugin, in which an input length is not validated, which may lead to information disclosure, tampering of data or denial of service. This affects vGPU version 12.x prior to 12.2 and version 11...

CVE-2021-1083

NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager vGPU plugin, in which an input length is not validated, which may lead to information disclosure, tampering of data, or denial of service. This affects vGPU version 12.x prior to 12.2 and version...

Design/Logic Flaw

NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU manager vGPU plugin, in which an input length is not validated, which may lead to information disclosure, tampering of data, or denial of service. This affects vGPU version 12.x prior to 12.2, version 11...

CVE-2021-1084

NVIDIA vGPU driver contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager vGPU plugin, in which an input length is not validated, which may lead to information disclosure, tampering of data or denial of service. This affects vGPU version 12.x prior to 12.2 and version 11...

CVE-2021-1083

CVE-2021-1083 affects NVIDIA vGPU software, specifically the guest kernel mode driver and the Virtual GPU Manager (vGPU plugin). The issue is an input length validation error that may lead to information disclosure, data tampering, or denial of service. Affected versions are vGPU software 12.x be...

NVIDIA Windows GPU Display Driver (April 2021)

A display driver installed on the remote Windows host is affected by multiple vulnerabilities: - NVIDIA Windows GPU Display Driver for Windows, R390 driver branch, contains a vulnerability in its installer where an attacker with local system access may replace an application resource with malicio...

NVIDIA Linux GPU Display (April 2021)

The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities: - NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys or nvidia.ko where improp...

The vulnerability of the Windows Secure Kernel Mode mechanism in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Secure Kernel Mode mechanism in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2021-1076

NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys or nvidia.ko where improper access control may lead to denial of service, information disclosure, or data corruption...

DEBIAN-CVE-2021-1076

NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys or nvidia.ko where improper access control may lead to denial of service, information disclosure, or data corruption...

CVE-2021-1076

NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys or nvidia.ko where improper access control may lead to denial of service, information disclosure, or data corruption...

Design/Logic Flaw

NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of...

Improper access control

NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys or nvidia.ko where improper access control may lead to denial of service, information disclosure, or data corruption...

CVE-2021-1075

CVE-2021-1075 (NVIDIA Windows GPU Display Driver) affects NVIDIA GPU Display Driver for Windows, in which the kernel-mode driver component nvlddmkm.sys erroneously dereferences a pointer to memory that may no longer be valid when handling DxgkDdiEscape. This can lead to code execution, denial of ...

CVE-2021-1075

NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of...

CVE-2021-1076

CVE-2021-1076 affects NVIDIA GPU Display Driver for Windows and Linux (kernel mode drivers nvlddmkm.sys / nvidia.ko). The vulnerability arises from improper access control in the kernel-mode component, potentially allowing denial of service, information disclosure, or data corruption. Connected a...

Medium: nvidia

Issue Overview: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys or nvidia.ko where improper access control may lead to denial of service, information disclosure, or data corruption. CVE-2021-1076 Affected Packages: nvidia Issue...