CVE-2021-1118CWE-250

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where there is the potential to execute privileged operations by the…

High · published October 29, 2021

CVSS v3.1
7.8
EPSS
0%
Percentile
30.2
In the wild
Unconfirmed
What it is

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where there is the potential to execute privileged operations by the guest OS, which may lead to information disclosure, data tampering, escalation of privileges, and denial of service

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00375 · 30.2th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2021-10-29T19:30Z
EPSS history
Timeline
  • 29 OCT 19:30Z
    NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where there is the potential to execute privileged operations by the…
    cvelistv5