Severity
High
Analysis Summary
CVE-2021-1073
NVIDIA GeForce Experience software contains a vulnerability where, if a user clicks on a maliciously formatted link that opens the GeForce Experience login page in a new browser tab instead of the GeForce Experience application and enters their login information, the malicious site can get access to the token of the user login session. Such an attack may lead to these targeted users’ data being accessed, altered, or lost.
Impact
- Credential Theft
- Unauthorized Access
Affected Vendors
NVIDIA
Affected Products
- GeForce Experience
Remediation
Refer to NVIDIA advisory for the list of upgraded patches.
https://nvidia.custhelp.com/app/answers/detail/a_id/5199#security-updates