CVE-2021-1117CWE-129

Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an attacker through specific configuration and with…

Medium · published October 27, 2021

CVSS v3.1
4.7
EPSS
0%
Percentile
8.3
In the wild
Unconfirmed
What it is

Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an attacker through specific configuration and with local unprivileged system access may cause improper input validation, which may lead to denial of service.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00191 · 8.3th percentile
Weakness
CWE-129 · Improper Validation of Array Index
Published
2021-10-27T20:35Z
EPSS history
Timeline
  • 27 OCT 20:35Z
    Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an attacker through specific configuration and with…
    cvelistv5