CVE Intelligence

Vulnerabilidades de NVIDIA

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de NVIDIA: 436 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-24187 Alta · 8.8 CWE-416 26/05/2026
Use After Free em NVIDIA Gpu Display Driver
NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
CVE-2026-24182 Média · 6.5 CWE-667 26/05/2026
NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker…
NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could leak held driver locks. A successful exploit of this vulnerability might lead to denial of service.
CVE-2025-33221 Média · 6.0 CWE-20 26/05/2026
Improper Input Validation em NVIDIA Gpu Display Driver
NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service.
CVE-2026-24212 Crítica · 9.8 CWE-319 26/05/2026
Cleartext Transmission of Sensitive Information em NVIDIA Isaac Launchable
NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-24162 Alta · 7.8 CWE-502 26/05/2026
Deserialization of Untrusted Data em NVIDIA Transformers4rec
NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-24218 Alta · 8.1 CWE-321 20/05/2026
NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the…
NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes identical SSH host keys to be deployed across multiple systems. The sharing of cryptographic identifiers across all similarly provisioned systems enables host impersonation or attacker-in-the-middle attacks. A successful exploit of this vulnerability might lead to code execution, data tampering, escalation of privileges, information disclosure, and denial of service.
CVE-2026-24217 Alta · 8.8 CWE-29 20/05/2026
NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path…
NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
CVE-2026-24216 Alta · 7.8 CWE-502 20/05/2026
Deserialization of Untrusted Data em NVIDIA Bionemo Framework
NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
CVE-2026-24188 Alta · 7.5 CWE-787 20/05/2026
Out-of-bounds Write em NVIDIA Tensorrt
NVIDIA TensorRT contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to data tampering.
CVE-2026-24215 Alta · 7.5 CWE-400 20/05/2026
Uncontrolled Resource Consumption em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24214 Crítica · 9.8 CWE-190 20/05/2026
Integer Overflow or Wraparound em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, data tampering, or denial of service.
CVE-2026-24213 Crítica · 9.8 CWE-125 20/05/2026
Out-of-bounds Read em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, or information disclosure.
CVE-2026-24210 Alta · 7.5 CWE-190 20/05/2026
Integer Overflow or Wraparound em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24209 Alta · 7.5 CWE-22 20/05/2026
Path Traversal em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24208 Alta · 7.5 CWE-22 20/05/2026
Path Traversal em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24207 Crítica · 9.8 Exploit público CWE-288 20/05/2026
Authentication Bypass Using an Alternate Path or Channel em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.
CVE-2026-24206 Crítica · 9.8 CWE-288 20/05/2026
Authentication Bypass Using an Alternate Path or Channel em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to escalation of privileges, denial of service, or information disclosure.
CVE-2026-24163 Crítica · 9.8 CWE-502 20/05/2026
Deserialization of Untrusted Data em NVIDIA Tensorrt Llm
NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure.
CVE-2026-24160 Alta · 7.5 CWE-690 20/05/2026
NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause…
NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24142 Crítica · 9.8 CWE-502 20/05/2026
Deserialization of Untrusted Data em NVIDIA Tensorrt Llm
NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2025-33255 Crítica · 9.8 CWE-502 20/05/2026
Deserialization of Untrusted Data em NVIDIA Tensorrt Llm
NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure.
CVE-2026-24231 Média · 6.3 CWE-918 28/04/2026
Server-Side Request Forgery (SSRF) em NVIDIA Nemoclaw
NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful exploit of this vulnerability may lead to information disclosure.
CVE-2026-24222 Alta · 8.6 CWE-497 28/04/2026
NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization…
NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandbox creation. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-24204 Média · 6.5 CWE-20 28/04/2026
Improper Input Validation em NVIDIA Nvflare
NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit of this vulnerability may lead to information disclosure.
CVE-2026-24186 Alta · 8.8 CWE-502 28/04/2026
Deserialization of Untrusted Data em NVIDIA Nvflare
NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message. A successful exploit of this vulnerability might lead to code execution.