Nvidia vulnerabilities
1,179 CVEs and advisories name Nvidia as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-33219NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wr
- CVE-2025-33218NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where an attacker could cause an int
- CVE-2025-33217NVIDIA Display Driver for Windows contains a vulnerability where an attacker could trigger a use after free.
- CVE-2025-33234NVIDIA runx contains a vulnerability where an attacker could cause a code injection.
- CVE-2025-33231NVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading mechanism where an attacker could cause an uncon
- CVE-2025-33230NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by sup
- CVE-2025-33229NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the sam
- CVE-2025-33228NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could cause an OS command injection by supplying
- CVE-2025-33233NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection.
- CVE-2025-33206NVIDIA NSIGHT Graphics for Linux contains a vulnerability where an attacker could cause command injection.
- CVE-2025-33222NVIDIA Isaac Launchable contains a vulnerability where an attacker could exploit a hard-coded credential issue.
- CVE-2025-33223NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges.
- CVE-2025-33224NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges.
- CVE-2025-33235NVIDIA Resiliency Extension for Linux contains a vulnerability in the checkpointing core, where an attacker may cause a race condition.
- CVE-2025-33225NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names.
- CVE-2025-33210NVIDIA Isaac Lab contains a deserialization vulnerability.
- CVE-2025-33226NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection.
- CVE-2025-33212NVIDIA NeMo Framework contains a vulnerability in model loading that could allow an attacker to exploit improper control mechanisms if a use
- CVE-2025-33214NVIDIA NVTabular for Linux contains a vulnerability in the Workflow component, where a user could cause a deserialization issue.
- CVE-2025-33213NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue
- CVE-2025-33208NVIDIA TAO contains a vulnerability where an attacker may cause a resource to be loaded via an uncontrolled search path.
- CVE-2025-33211NVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper validation of specified quantity in input.
- CVE-2025-33201NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause an improper check for unusual or exceptional conditions
- CVE-2025-33203NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request For
- CVE-2025-33205NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an un
- CVE-2025-33204NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker
- CVE-2025-33200NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused.
- CVE-2025-33199NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause incorrect control flow behavior.
- CVE-2025-33198NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused.
- CVE-2025-33197NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a NULL pointer dereference.