Vulnerabilidades de NVIDIA
CVEs publicadas que afetam produtos de NVIDIA: 436 registro(s), com severidade, exploração e correções.
GeForce 120Tesla 119NVIDIA RTX, Quadro, NVS 116Virtual GPU Manager 67Guest driver 63Megatron-Bridge 43Nemo Megatron Bridge 43Triton Inference Server 36Nemo 21NeMo Framework 21DGX Spark 20Tensorrt Llm 16Dynamo 15Dgx Os 15Nemoclaw 14Infra Controller 14Infrastructure Controller 14Gpu Display Driver 12Megatron-lm 10AIStore framework 9DALI 7Openshell 6Tensorrt 6Unified Fabric Manager Enterprise - LTS 2023 5Unified Fabric Manager Enterprise - LTS 2024 5Unified Fabric Manager Enterprise - LTS 2025 5Nemo Speech 5Dgx Spark Uefi 5Cumulus Linux GA 5Unified Fabric Manager Enterprise - GA 5Cumulus Linux 5Cumulus Linux LTS 4RTX PRO, RTX, Quadro 4Nvos 4ConnectX LTS24 4BlueField GA 4Bionemo Framework 4Cuda Toolkit 4BlueField LTS23 4BlueField LTS24 4
CVE-2026-24187
Alta · 8.8
CWE-416 26/05/2026
Use After Free em NVIDIA Gpu Display Driver
NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
CVE-2026-24182
Média · 6.5
CWE-667 26/05/2026
NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker…
NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could leak held driver locks. A successful exploit of this vulnerability might lead to denial of service.
CVE-2025-33221
Média · 6.0
CWE-20 26/05/2026
Improper Input Validation em NVIDIA Gpu Display Driver
NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service.
CVE-2026-24212
Crítica · 9.8
CWE-319 26/05/2026
Cleartext Transmission of Sensitive Information em NVIDIA Isaac Launchable
NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-24162
Alta · 7.8
CWE-502 26/05/2026
Deserialization of Untrusted Data em NVIDIA Transformers4rec
NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-24218
Alta · 8.1
CWE-321 20/05/2026
NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the…
NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes identical SSH host keys to be deployed across multiple systems. The sharing of cryptographic identifiers across all similarly provisioned systems enables host impersonation or attacker-in-the-middle attacks. A successful exploit of this vulnerability might lead to code execution, data tampering, escalation of privileges, information disclosure, and denial of service.
CVE-2026-24217
Alta · 8.8
CWE-29 20/05/2026
NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path…
NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
CVE-2026-24216
Alta · 7.8
CWE-502 20/05/2026
Deserialization of Untrusted Data em NVIDIA Bionemo Framework
NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
CVE-2026-24188
Alta · 7.5
CWE-787 20/05/2026
Out-of-bounds Write em NVIDIA Tensorrt
NVIDIA TensorRT contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to data tampering.
CVE-2026-24215
Alta · 7.5
CWE-400 20/05/2026
Uncontrolled Resource Consumption em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24214
Crítica · 9.8
CWE-190 20/05/2026
Integer Overflow or Wraparound em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, data tampering, or denial of service.
CVE-2026-24213
Crítica · 9.8
CWE-125 20/05/2026
Out-of-bounds Read em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, or information disclosure.
CVE-2026-24210
Alta · 7.5
CWE-190 20/05/2026
Integer Overflow or Wraparound em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24209
Alta · 7.5
CWE-22 20/05/2026
Path Traversal em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24208
Alta · 7.5
CWE-22 20/05/2026
Path Traversal em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24207
Crítica · 9.8
Exploit público CWE-288 20/05/2026
Authentication Bypass Using an Alternate Path or Channel em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.
CVE-2026-24206
Crítica · 9.8
CWE-288 20/05/2026
Authentication Bypass Using an Alternate Path or Channel em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to escalation of privileges, denial of service, or information disclosure.
CVE-2026-24163
Crítica · 9.8
CWE-502 20/05/2026
Deserialization of Untrusted Data em NVIDIA Tensorrt Llm
NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure.
CVE-2026-24160
Alta · 7.5
CWE-690 20/05/2026
NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause…
NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24142
Crítica · 9.8
CWE-502 20/05/2026
Deserialization of Untrusted Data em NVIDIA Tensorrt Llm
NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2025-33255
Crítica · 9.8
CWE-502 20/05/2026
Deserialization of Untrusted Data em NVIDIA Tensorrt Llm
NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure.
CVE-2026-24231
Média · 6.3
CWE-918 28/04/2026
Server-Side Request Forgery (SSRF) em NVIDIA Nemoclaw
NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful exploit of this vulnerability may lead to information disclosure.
CVE-2026-24222
Alta · 8.6
CWE-497 28/04/2026
NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization…
NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandbox creation. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-24204
Média · 6.5
CWE-20 28/04/2026
Improper Input Validation em NVIDIA Nvflare
NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit of this vulnerability may lead to information disclosure.
CVE-2026-24186
Alta · 8.8
CWE-502 28/04/2026
Deserialization of Untrusted Data em NVIDIA Nvflare
NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message. A successful exploit of this vulnerability might lead to code execution.