CVE Intelligence

Vulnerabilidades de NVIDIA

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de NVIDIA: 436 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-24178 Crítica · 9.8 CWE-639 28/04/2026
Authorization Bypass Through User-Controlled Key (IDOR) em NVIDIA Nvflare
NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A successful exploit of this vulnerability may lead to privilege escalation, data tampering, information disclosure, code execution, and denial of service.
CVE-2026-24189 Alta · 8.2 CWE-125 21/04/2026
Out-of-bounds Read em NVIDIA CUDA-Q
NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause an out-of-bounds read by sending a maliciously crafted request. A successful exploit of this vulnerability might lead to denial of service and information disclosure.
CVE-2026-24177 Alta · 7.7 CWE-306 21/04/2026
Missing Authentication for Critical Function em NVIDIA KAI Scheduler
NVIDIA KAI Scheduler contains a vulnerability where an attacker could access API endpoints without authorization. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-24176 Média · 4.3 CWE-863 21/04/2026
Incorrect Authorization em NVIDIA KAI Scheduler
NVIDIA KAI Scheduler contains a vulnerability where an attacker could cause improper authorization through cross-namespace pod references. A successful exploit of this vulnerability might lead to data tampering.
CVE-2026-24175 Alta · 7.5 CWE-248 07/04/2026
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a…
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request header to the server. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24174 Alta · 7.5 CWE-681 07/04/2026
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a…
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the server. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24173 Alta · 7.5 CWE-190 07/04/2026
Integer Overflow or Wraparound em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the server. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24156 Alta · 7.3 CWE-502 07/04/2026
Deserialization of Untrusted Data em NVIDIA Data Loading Library
NVIDIA DALI contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to arbitrary code execution.
CVE-2026-24147 Média · 4.8 CWE-22 07/04/2026
Path Traversal em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability in triton server where an attacker may cause an information disclosure by uploading a model configuration. A successful exploit of this vulnerability may lead to information disclosure or denial of service.
CVE-2026-24146 Alta · 7.5 CWE-789 07/04/2026
NVIDIA Triton Inference Server contains a vulnerability where insufficient input…
NVIDIA Triton Inference Server contains a vulnerability where insufficient input validation and a large number of outputs could cause a server crash. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24165 Alta · 8.8 CWE-502 31/03/2026
Deserialization of Untrusted Data em NVIDIA Bionemo Framework
NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
CVE-2026-24164 Crítica · 9.8 CWE-502 31/03/2026
Deserialization of Untrusted Data em NVIDIA Bionemo Framework
NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
CVE-2026-24154 Média · 6.8 CWE-78 31/03/2026
OS Command Injection em NVIDIA Jetson Linux
NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, data tampering, and information disclosure.
CVE-2026-24153 Média · 5.5 CWE-501 31/03/2026
NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application…
NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-24148 Crítica · 9.4 CWE-1188 31/03/2026
Insecure Default Initialization of Resource em NVIDIA Jetson Linux
NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data tampering, and partial denial of service across devices sharing the same machine ID.
CVE-2026-24159 Crítica · 9.8 CWE-502 24/03/2026
Deserialization of Untrusted Data em NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.
CVE-2026-24158 Alta · 7.5 CWE-789 24/03/2026
NVIDIA Triton Inference Server contains a vulnerability in the HTTP endpoint where an…
NVIDIA Triton Inference Server contains a vulnerability in the HTTP endpoint where an attacker may cause a denial of service by providing a large compressed payload. A successful exploit of this vulnerability may lead to denial of service.
CVE-2026-24157 Crítica · 9.8 CWE-502 24/03/2026
Deserialization of Untrusted Data em NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.
CVE-2026-24152 Alta · 7.8 CWE-502 24/03/2026
Deserialization of Untrusted Data em NVIDIA Megatron-lm
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-24151 Alta · 7.8 CWE-502 24/03/2026
Deserialization of Untrusted Data em NVIDIA Megatron-lm
NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to load a maliciously crafted input. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-24150 Alta · 7.8 CWE-502 24/03/2026
Deserialization of Untrusted Data em NVIDIA Megatron-lm
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-24141 Alta · 7.8 CWE-502 24/03/2026
Deserialization of Untrusted Data em NVIDIA NVIDIA Model Optimizer
NVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization feature, where a user could cause unsafe deserialization by providing a specially crafted input file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2025-33254 Alta · 7.5 CWE-362 24/03/2026
Race Condition em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause internal state corruption. A successful exploit of this vulnerability may lead to a denial of service.
CVE-2025-33248 Alta · 7.8 CWE-502 24/03/2026
Deserialization of Untrusted Data em NVIDIA Megatron-lm
NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2025-33247 Alta · 7.8 CWE-502 24/03/2026
Deserialization of Untrusted Data em NVIDIA Megatron-lm
NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.