Nvidia vulnerabilities
1,179 CVEs and advisories name Nvidia as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-24214NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer overflow.
- CVE-2026-24213NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read.
- CVE-2026-24210NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflow.
- CVE-2026-24209NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue.
- CVE-2026-24208NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue.
- CVE-2026-24207NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass.
- CVE-2026-24206NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass.
- CVE-2026-24231NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side
- CVE-2026-24222NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper a
- CVE-2026-24204NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing.
- CVE-2026-24186NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOB
- CVE-2026-24178NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cau
- CVE-2026-24189NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause an out-of-bounds read by sending a mali
- CVE-2026-24177NVIDIA KAI Scheduler contains a vulnerability where an attacker could access API endpoints without authorization.
- CVE-2026-24176NVIDIA KAI Scheduler contains a vulnerability where an attacker could cause improper authorization through cross-namespace pod references.
- CVE-2026-24175NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request header t
- CVE-2026-24174NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the s
- CVE-2026-24173NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the s
- CVE-2026-24147NVIDIA Triton Inference Server contains a vulnerability in triton server where an attacker may cause an information disclosure by uploading
- CVE-2026-24146NVIDIA Triton Inference Server contains a vulnerability where insufficient input validation and a large number of outputs could cause a serv
- CVE-2026-24156NVIDIA DALI contains a vulnerability where an attacker could cause a deserialization of untrusted data.
- CVE-2026-24165NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data.
- CVE-2026-24164NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data.
- CVE-2026-24154NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line argu
- CVE-2026-24153NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled.
- CVE-2026-24148NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initia
- CVE-2026-24159NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution.
- CVE-2026-24157NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution.
- CVE-2026-24141NVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization feature, where a user could cause unsafe dese
- CVE-2026-24158NVIDIA Triton Inference Server contains a vulnerability in the HTTP endpoint where an attacker may cause a denial of service by providing a