CVE-2021-1060: Improper Input Validation

NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in which an input index is not validated, which may lead to tampering of data or denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 prior to 11.3...

CVE-2021-1052

NVIDIA GPU Display Driver (Windows and Linux) contains CVE-2021-1052 in the kernel-mode layer (nvlddmkm.sys / nvidia.ko) via DxgkDdiEscape/IOCTL, allowing user-mode clients to access legacy privileged APIs, risking DoS, privilege escalation, and information disclosure. Related CVEs 1053 (state: i...

CVE-2021-1052

NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape or IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to denial of service, escalation of privileges, and...

CVE-2021-1053

CVE-2021-1053 affects NVIDIA GPU Display Driver for Windows and Linux (all versions). The kernel-mode layer (nvlddmkm.sys) handles DxgkDdiEscape or IOCTL and may improperly validate a user pointer, resulting in a denial of service. Public technical detail across connected documents confirms the a...

CVE-2021-1056

NVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode layer nvidia.ko in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure...

PT-2021-13456

Name of the Vulnerable Software and Affected Versions NVIDIA vGPU software versions 8.x through 8.5 NVIDIA vGPU software versions 11.0 through 11.2 Description The issue arises from an input index not being validated in the guest kernel mode driver and vGPU plugin, potentially leading to data...

CVE-2021-1053

NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape or IOCTL in which improper validation of a user pointer may lead to denial of service...

CVE-2021-1056

NVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode layer nvidia.ko in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure...

CVE-2021-1052

NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape or IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to denial of service, escalation of privileges, and...

PT-2021-13452 · Nvidia +2 · Nvidia Gpu Display Driver +2

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux, all versions Description: The issue arises from the kernel mode layer nvidia.ko not completely honoring operating system file system permissions, which is intended to provide GPU device-level isolation. Th...

CVE-2021-1053

NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape or IOCTL in which improper validation of a user pointer may lead to denial of service...

Security Bulletin: NVIDIA GPU Display Driver - January 2021

NVIDIA has released a software security update for NVIDIA® GPU Display Driver. This update addresses issues that may lead to denial of service, escalation of privileges, data tampering, or information disclosure. To protect your system, download and install this software update from the NVIDIA...

CVE-2021-1052

NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape or IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to denial of service, escalation of privileges, and...

UBUNTU-CVE-2021-1056

NVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode layer nvidia.ko in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure...

Google Discloses Poorly-Patched, Now Unpatched, Windows 0-Day Bug

Google's Project Zero team has made public details of an improperly patched zero-day security vulnerability in Windows print spooler API that could be leveraged by a bad actor to execute arbitrary code. Details of the unpatched flaw were revealed publicly after Microsoft failed to rectify it with...

CVE-2020-17136

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17103, CVE-2020-17134. Recent assessments: gwillcox-r7 at December 15, 2020 7:34pm UTC reported: A nice little LPE technique which takes advantage of several issues as originally noted ...

Microsoft Windows - Win32k Elevation of Privilege Exploit

Exploit Title: Microsoft Windows - Win32k Elevation of Privilege Author: nu11secur1ty Vendor: Microsoft Software Link: https://support.microsoft.com/en-us/help/3095649/win32k-sys-update-in-windows-october-2015 Exploit link:...

Microsoft Windows - Win32k Elevation of Privilege

Exploit Title: Microsoft Windows - Win32k Elevation of Privilege Author: nu11secur1ty Date: 08.03.2020 Exploit Date: 01/14/2020 Vendor: Microsoft Software Link: https://support.microsoft.com/en-us/help/3095649/win32k-sys-update-in-windows-october-2015 Exploit link:...

CVE-2020-28921

An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL functionality that allows low-privilege users to read and write to arbitrary Model Specific Registers MSRs. This could lead to arbitrary Ring-0 code execution and escalation of...

Double free

Use after free in Kernel Mode Driver for IntelR TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user to potentially enable escalation of privilege via local access...