Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2025-33207
Medium · 6.8
CWE-1262 Sep 29, 2026
NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF...
NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service.
CVE-2025-54509
Medium · 4.0
CWE-1262 Jun 9, 2026
Improper access control for register interface in the Input-Output Memory Management…
Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor (ASP), potentially resulting in loss of integrity.
CVE-2025-47385
High · 7.8
CWE-1262 Mar 2, 2026
Improper Access Control for Register Interface in SCE-Mink
Memory Corruption when accessing trusted execution environment without proper privilege check.
CVE-2025-36194
Low · 3.3
CWE-1262 Feb 2, 2026
This Power System update is being released to address
IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations.
CVE-2025-20788
Medium · 4.4
CWE-1262 Dec 2, 2025
In GPU pdma, there is a possible memory corruption due to a missing permission check…
In GPU pdma, there is a possible memory corruption due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS10117735; Issue ID: MSV-4539.