CVE-2021-1060: NVIDIA Virtual GPU Manager

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in which an input index is not validated, which may lead to tampering of data or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).

Affected products

• NVIDIA Virtual GPU Manager: from 8.0, before 8.6 (fixed in 8.6); from 11.0, before 11.3 (fixed in 11.3)

Published 2021-01-08. Last modified 2026-06-17.