CVE-2021-1115: NVIDIA GPU Display Driver

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs, where an attacker with local unprivileged system access may cause a NULL pointer dereference, which may lead to denial of service in a component beyond the vulnerable component.

Affected products

• NVIDIA GPU Display Driver: from 390, before 392.68 (fixed in 392.68); from 460, before 463.15 (fixed in 463.15); from 470, before 472.39 (fixed in 472.39); from 490, before 496.49 (fixed in 496.49)

Published 2021-10-27. Last modified 2026-06-17.