CVE-2021-1092: 
NVIDIA Graphics Driver vulnerability analysis and mitigation

CVE-2021-1092 is a security vulnerability discovered in the NVIDIA GPU Display Driver for Windows, specifically affecting the NVIDIA Control Panel application. The vulnerability was disclosed in July 2021 with a CVSS v3.1 base score of 7.1 (NVIDIA Security).

The vulnerability exists in the NVIDIA Control Panel application where it is susceptible to a Windows file system symbolic link attack. The vulnerability has a CVSS vector of AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H, indicating local access is required with low attack complexity and privileged access (NVIDIA Security).

When exploited, an unprivileged attacker can cause the applications to overwrite privileged files, which can result in potential denial of service or data loss (NVIDIA Security).

The vulnerability requires local access with low attack complexity. It affects multiple NVIDIA driver branches including R470, R465, R460, R450, R418, and R390 on Windows systems (NVIDIA Security).

NVIDIA has released security updates to address this vulnerability. For Windows systems, users should update to version 471.41 for R470 branch, 462.96 for R460 branch, 453.10 for R450 branch, and 392.67 for R390 branch. For vGPU software users, updates are available through the NVIDIA Licensing Portal (NVIDIA Security).