{"id":"CVE-2021-1079","aliases":["EUVD-2021-6546","GHSA-f448-p2vf-4r6q"],"status":"published","title":"NVIDIA GeForce Experience, all versions prior to 3.22, contains a vulnerability in GameStream...","description":"NVIDIA GeForce Experience, all versions prior to 3.22, contains a vulnerability in GameStream plugins where log files are created using NT/System level permissions, which may lead to code execution, denial of service, or local privilege escalation. The attacker does not have control over the consequence of a modification nor would they be able to leak information as a direct result of the overwrite.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00285,"percentile":0.21131,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2021-04-20T14:20:11Z","modified":"2026-06-17T03:30:55Z","products":[{"vendor":"nvidia","product":"geforce_experience"},{"vendor":"nvidia","product":"nvidia geforce experience software"}],"references":[{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5184","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1079"},{"url":"https://github.com/advisories/GHSA-f448-p2vf-4r6q"}],"sources":{"cve":[{"id":"CVE-2021-1079","description":"NVIDIA GeForce Experience, all versions prior to 3.22, contains a vulnerability in GameStream plugins where log files are created using NT/System level permissions, which may lead to code execution, denial of service, or local privilege escalation. The attacker does not have control over the consequence of a modification nor would they be able to leak information as a direct result of the overwrite.","status":"published","published":"2021-04-20T14:20:11Z","modified":"2024-08-03T15:55:18.623Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:33:08.409321Z"}],"euvd":[{"id":"EUVD-2021-6546","description":"NVIDIA GeForce Experience, all versions prior to 3.22, contains a vulnerability in GameStream plugins where log files are created using NT/System level permissions, which may lead to code execution, denial of service, or local privilege escalation. The attacker does not have control over the consequence of a modification nor would they be able to leak information as a direct result of the overwrite.","status":"published","published":"2021-04-20T14:20:11Z","modified":"2024-08-03T15:55:18Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-03T03:25:15.598162Z"}],"ghsa":[{"id":"GHSA-f448-p2vf-4r6q","title":"NVIDIA GeForce Experience, all versions prior to 3.22, contains a vulnerability in GameStream...","description":"NVIDIA GeForce Experience, all versions prior to 3.22, contains a vulnerability in GameStream plugins where log files are created using NT/System level permissions, which may lead to code execution, denial of service, or local privilege escalation.","status":"published","published":"2022-05-24T17:48:06Z","modified":"2023-01-29T05:06:26Z","updated_at":"2026-11-02T14:46:01.439998Z"}],"nvd":[{"id":"CVE-2021-1079","description":"NVIDIA GeForce Experience, all versions prior to 3.22, contains a vulnerability in GameStream plugins where log files are created using NT/System level permissions, which may lead to code execution, denial of service, or local privilege escalation. The attacker does not have control over the consequence of a modification nor would they be able to leak information as a direct result of the overwrite.","status":"published","published":"2021-04-20T16:15:10.26Z","modified":"2026-06-17T03:30:55.3Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":3.6,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:06:52.03307Z"}]}}
