Nvidia vulnerabilities
1,179 CVEs and advisories name Nvidia as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-23344The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to run code on the platform host as a non-privileged user.
- CVE-2025-23343The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to write files to restricted components.
- CVE-2025-23342The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to a privileged account .
- CVE-2025-23262NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorizatio
- CVE-2025-23261NVIDIA Cumulus Linux and NVOS products contain a vulnerability, where hashed user passwords are not properly suppressed in log files, potent
- CVE-2025-23259NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the system might be able to cause info
- CVE-2025-23258NVIDIA DOCA contains a vulnerability in the collectx-dpeserver Debian package for arm64 that could allow an attacker with low privileges to
- CVE-2025-23257NVIDIA DOCA contains a vulnerability in the collectx-clxapidev Debian package that could allow an actor with low privileges to escalate priv
- CVE-2025-23256NVIDIA BlueField contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorizati
- CVE-2025-23302NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the LS10 could enable an attacker to set an unsafe debug access level
- CVE-2025-23301NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the VBIOS could enable an attacker to set an unsafe debug access leve
- CVE-2025-23315NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an atta
- CVE-2025-23314NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cau
- CVE-2025-23313NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cau
- CVE-2025-23312NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an att
- CVE-2025-23307NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection.
- CVE-2025-23306NVIDIA Megatron-LM for all platforms contains a vulnerability in the megatron/training/ arguments.py component where an attacker could cause
- CVE-2025-23305NVIDIA Megatron-LM for all platforms contains a vulnerability in the tools component, where an attacker may exploit a code injection issue.
- CVE-2025-23298NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability in a python dependency, where an attacker could cause a code injec
- CVE-2025-23296NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component where an attacker could cause a code injection issue.
- CVE-2025-23295NVIDIA Apex for all platforms contains a vulnerability in a Python component where an attacker could cause a code injection issue by providi
- CVE-2025-23304NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection
- CVE-2025-23303NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code
- CVE-2025-23294NVIDIA WebDataset for all platforms contains a vulnerability where an attacker could execute arbitrary code with elevated permissions.
- CVE-2025-23335NVIDIA Triton Inference Server for Windows and Linux and the Tensor RT backend contain a vulnerability where an attacker could cause an unde
- CVE-2025-23334NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of
- CVE-2025-23333NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of
- CVE-2025-23331NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a memory allocation with excessive si
- CVE-2025-23327NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through spec
- CVE-2025-23326NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through a sp