Vulnerability in Microsoft Windows
CVE-2021-1073
NVIDIA GeForce Experience, all versions prior to 3.23, contains a vulnerability in the login flow when a user tries to log in by using a browser, while, at the same time, any other web page is loaded in other tabs of the same browser. In this situation, the web page can get access to the token of the user login session, leading to the possibility that the user’s account is compromised. This may lead to the targeted user’s data being accessed, altered, or lost.
EPSS: 0.009 (57.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.3 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H.
Affected products
- Microsoft Windows
- Nvidia Geforce_experience
- Nvidia Geforce Experience Software — versions All versions prior to 3.23
References
- psirt@nvidia.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-1073?
- CVE-2021-1073 is a high-severity vulnerability in Microsoft Windows. CVSS score: 8.3/10. Published 2021-06-25.
- How severe is CVE-2021-1073?
- High severity. CVSS v3 base score is 8.3 out of 10.