CVE-2021-1086

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it allows guests to control unauthorized…

High7.1EPSS 0.22%

Published: 29 Apr 2021
Updated: 3 Aug 2024
Reserved: 12 Nov 2020
Assigned by: nvidia

Description

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it allows guests to control unauthorized resources, which may lead to integrity and confidentiality loss or information disclosure. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior to 8.7).

Timeline

2020
12 Nov 2020
12 Nov 2020
ID reserved
By nvidia
2021
29 Apr 20216 months later
29 Apr 2021· 6 months later
Published
2024
3 Aug 20243 years later
3 Aug 2024· 3 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2021-1086, by who scored it
Scored by	CVSS	Score	Vector
nvidiaCNA (assigner)	3.1	High7.1	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
NVDNVD · Modified	3.1	High7.1	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS (exploitation in 30 days): 0.22% · top 87% of all CVEs (7 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.1.

Weakness

information disclosure and data tampering
CWE-863 (opens in a new tab)All about CWE-863 and its CVEs

Affected products

NVIDIA · NVIDIA Virtual GPU Software
- affected vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior to 8.7)

References (1)

https://nvidia.custhelp.com/app/answers/detail/a_id/5172 (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2021-1086](https://trackcve.app/badge/CVE-2021-1086.svg)](https://trackcve.app/cve/CVE-2021-1086)

Record last updated 3 Aug 2024, 15:55 UTC.