What is CVE-2021-1072?

CVE-2021-1072 is a medium-severity vulnerability in Microsoft Windows. CVSS score: 6.0/10. Published 2021-02-05.

How severe is CVE-2021-1072?

Medium severity. CVSS v3 base score is 6.0 out of 10.

Vulnerability in Microsoft Windows

CVE-2021-1072

NVIDIA GeForce Experience, all versions prior to 3.21, contains a vulnerability in GameStream (rxdiag.dll) where an arbitrary file deletion due to improper handling of log files may lead to denial of service.

EPSS: 0.003 (17.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.0 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H.

Affected products

Microsoft Windows
Nvidia Geforce_experience
Nvidia Geforce Experience Software — versions All versions prior to 3.21

References

psirt@nvidia.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-1072?: CVE-2021-1072 is a medium-severity vulnerability in Microsoft Windows. CVSS score: 6.0/10. Published 2021-02-05.
How severe is CVE-2021-1072?: Medium severity. CVSS v3 base score is 6.0 out of 10.