CVE-2021-1075

HIGH Year: 2021
CVSS v3 Score
7.3
High
CVSS v2 Score
5.6
Medium
Weakness Type
CWE-476
View all →

Vulnerability Description

NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of service, or escalation of privileges. Attacker does not have any control over the information and may conduct limited data modification.

Related Vulnerabilities

CVE-2019-10097

HIGH
CVSS:7.2(High)

In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buff...

CWE-4762019

CVE-2020-3552

HIGH
CVSS:7.4(High)

A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affec...

CWE-4762020

CVE-2021-47464

HIGH
CVSS:7.4(High)

In the Linux kernel, the following vulnerability has been resolved: audit: fix possible null-pointer dereference in audit_filter_rules Fix possible null-pointer dereference in audit_filter_rules. audi...

CWE-4762021

CVE-2024-0035

HIGH
CVSS:7.4(High)

In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to a missing null check. This could lead to local escalation of privilege with no a...

CWE-4762024

CVE-2024-20312

HIGH
CVSS:7.4(High)

A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial o...

CWE-4762024

CVE-2024-39356

HIGH
CVSS:7.4(High)

NULL pointer dereference in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service vi...

CWE-4762024