Nvidia vulnerabilities
1,179 CVEs and advisories name Nvidia as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-100962NVIDIA NeMo Export-Deploy for all platforms contains a vulnerability in multimodal deployment where an attacker could cause a server-side…
- CVE-2026-65168NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code.
- CVE-2026-65165NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary…
- CVE-2026-65140NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained…
- CVE-2026-65139NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary code execution.
- CVE-2026-65138NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate…
- CVE-2026-65109NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remove files outside…
- CVE-2026-65108NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd is running with…
- CVE-2026-65107NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file transmission to write…
- CVE-2026-65160NVIDIA nvJPEG contains a vulnerability where an attacker could cause a divide-by-zero.
- CVE-2026-47486NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write.
- CVE-2026-65145NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue.
- CVE-2026-65151NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue.
- CVE-2026-65120NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery.
- CVE-2026-24269NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery.
- CVE-2026-65119NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause…
- CVE-2026-65180NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciou
- CVE-2026-65104NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used
- CVE-2026-65110NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a malic
- CVE-2026-65131NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed ov
- CVE-2026-65172NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated re
- CVE-2026-65164NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause
- CVE-2026-65173NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote at
- CVE-2026-65101NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forger
- CVE-2026-65170NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-s
- CVE-2026-65162NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply
- CVE-2026-65161NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to t
- CVE-2026-65103NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote a
- CVE-2026-67456NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow.
- CVE-2026-65148NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow.