nvidia Vulnerability Advisory Catalog

Total 777 security vulnerabilities recorded for nvidia software and firmware.

← Back to All Vendors
Component: mlnx-os

NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a s...

📅 2024-08-12
CVSS 7.5 Dossier →
CVE-2024-0104 MEDIUM
Component: onyx

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. ...

📅 2024-08-08
CVSS 4.2 Dossier →
Component: jetson_linux

NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A ...

📅 2024-08-08
CVSS 8.7 Dossier →
Component: gpu_display_driver

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds r...

📅 2024-08-08
CVSS 7.8 Dossier →
Component: cuda_toolkit

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm, where an attacker can cause an out-of-bounds read issue by deceiving a use...

📅 2024-08-08
CVSS 3.3 Dossier →
Component: mlnx-os

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an at...

📅 2024-08-08
CVSS 7.5 Dossier →
CVE-2024-0103 MEDIUM
Component: triton_inference_server

NVIDIA Triton Inference Server for Linux contains a vulnerability where a user may cause an incorrect Initialization of resource by network issue. A s...

📅 2024-06-13
CVSS 5.4 Dossier →
CVE-2024-0095 CRITICAL
Component: triton_inference_server

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where a user can inject forged logs and executable commands by injecting...

📅 2024-06-13
CVSS 9.0 Dossier →
CVE-2024-0093 MEDIUM
Component: virtual_gpu

NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorized to have...

📅 2024-06-13
CVSS 6.5 Dossier →
CVE-2024-0092 MEDIUM
Component: gpu_display_driver

NVIDIA GPU Driver for Windows and Linux contains a vulnerability where an improper check or improper handling of exception conditions might lead to de...

📅 2024-06-13
CVSS 5.5 Dossier →
Component: gpu_display_driver

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver...

📅 2024-06-13
CVSS 7.8 Dossier →
Component: gpu_display_driver

NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerabi...

📅 2024-06-13
CVSS 7.8 Dossier →
Component: gpu_display_driver

NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed. A s...

📅 2024-06-13
CVSS 7.8 Dossier →
CVE-2024-0086 MEDIUM
Component: virtual_gpu

NVIDIA vGPU software for Linux contains a vulnerability where the software can dereference a NULL pointer. A successful exploit of this vulnerability ...

📅 2024-06-13
CVSS 5.5 Dossier →
CVE-2024-0085 MEDIUM
Component: virtual_gpu

NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A succes...

📅 2024-06-13
CVSS 6.3 Dossier →
Component: virtual_gpu

NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could execute privileged operations. A successf...

📅 2024-06-13
CVSS 7.8 Dossier →
CVE-2024-0100 MEDIUM
Component: triton_inference_server

NVIDIA Triton Inference Server for Linux contains a vulnerability in the tracing API, where a user can corrupt system files. A successful exploit of t...

📅 2024-05-14
CVSS 6.5 Dossier →
CVE-2024-0098 MEDIUM
Component: chatrtx

NVIDIA ChatRTX for Windows contains a vulnerability in the ChatRTX UI and backend, where a user can cause a clear-text transmission of sensitive infor...

📅 2024-05-14
CVSS 5.5 Dossier →
Component: chatrtx

NVIDIA ChatRTX for Windows contains a vulnerability in ChatRTX UI, where a user can cause an improper privilege management issue by exploiting interpr...

📅 2024-05-14
CVSS 7.5 Dossier →
Component: chatrtx

NVIDIA ChatRTX for Windows contains a vulnerability in Chat RTX UI, where a user can cause an improper privilege management issue by sending user inpu...

📅 2024-05-14
CVSS 7.5 Dossier →
CVE-2024-0088 MEDIUM
Component: triton_inference_server

NVIDIA Triton Inference Server for Linux contains a vulnerability in shared memory APIs, where a user can cause an improper memory access issue by a n...

📅 2024-05-14
CVSS 5.5 Dossier →
CVE-2024-0087 CRITICAL
Component: triton_inference_server

NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitrary file. If this file exists,...

📅 2024-05-14
CVSS 9.0 Dossier →
CVE-2024-0083 MEDIUM
Component: chatrtx

NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause a cross-site scripting error by network by running maliciou...

📅 2024-04-08
CVSS 6.5 Dossier →
Component: chatrtx

NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause improper privilege management by sending open file requests...

📅 2024-04-08
CVSS 8.2 Dossier →
Page 10 of 33 (777 Total Records)