CVE Intelligence

NVIDIA Cuda Toolkit vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting NVIDIA Cuda Toolkit: 4 record(s), with affected versions and fixes.
cpe:2.3:a:nvidia:cuda_toolkit

CVE-2025-33231 Medium · 6.7 CWE-427 Jan 20, 2026
Uncontrolled Search Path Element in NVIDIA Cuda Toolkit
NVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading mechanism where an attacker could cause an uncontrolled search path element by exploiting insecure DLL search paths. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service and information disclosure.
CVE-2025-33230 High · 7.3 CWE-78 Jan 20, 2026
OS Command Injection in NVIDIA Cuda Toolkit
NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.
CVE-2025-33229 High · 7.3 CWE-427 Jan 20, 2026
Uncontrolled Search Path Element in NVIDIA Cuda Toolkit
NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileges as the NVIDIA Nsight Visual Studio Edition Monitor application. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.
CVE-2025-33228 High · 7.3 CWE-78 Jan 20, 2026
OS Command Injection in NVIDIA Cuda Toolkit
NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could cause an OS command injection by supplying a malicious string to the process_nsys_rep_cli.py script if the script is invoked manually. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.