CVE-2021-1087: NVIDIA Virtual GPU Manager

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin), which could allow an attacker to retrieve information that could lead to a Address Space Layout Randomization (ASLR) bypass. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior to 8.7).

Affected products

• NVIDIA Virtual GPU Manager: from 8.0, before 8.7 (fixed in 8.7); from 11.0, before 11.4 (fixed in 11.4); from 12.0, before 12.2 (fixed in 12.2)

Published 2021-04-29. Last modified 2026-06-17.