NVIDIA vulnerabilities
We track 582 vulnerabilities in NVIDIA products across 60+ products. 582 are rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2026.
Latest NVIDIA vulnerabilities
- 8.8 High severity
Mellanox OS: Improper Access Control
NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalatio
- 8.8 High severity
NVIDIA Jetson AGX Xavier series, Jetson Xavier…: Improper Handling of Exceptional Conditions
NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead to denial of service, code execution, and escalation of priv
- 7.8 High severity
GPU Display Driver, vGPU Software, Cloud Gaming: Out-of-bounds Read
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of
- 7.5 High severity
Mellanox OS: Protection Mechanism Failure
NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to de
- 7.8 High severity
vGPU software and Cloud Gaming: Buffer Copy without Checking Size of Input
NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could cause buffer overrun in the host. A successful exploit of this vulnerability might lead to information disclosure, data tampering, escalation of privil
- 7.2 High severity
NVIDIA Triton Inference Server: Improper Output Neutralization for Logs
NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where a user can inject forged logs and executable commands by injecting arbitrary data as a new log entry. A successful exploit of this vulnerability might lead to code execution, d
- 7.8 High severity
GPU display driver, vGPU software, and Cloud…: Untrusted Pointer Dereference
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and
- 7.8 High severity
GPU display driver, vGPU software, and Cloud…: Out-of-bounds Write
NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and da
- 7.8 High severity
GPU display driver, vGPU software, and Cloud…: Improper Initialization
NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed. A successful exploit of this vulnerability might lead to code execution, information disclosure, or data tamperin
- 7.8 High severity
vGPU software and Cloud Gaming: Incorrect Privilege Assignment
NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful exploit of this vulnerability might lead to data tampering, escalation of privileges, and denial of servi
- 7.8 High severity
vGPU software and Cloud Gaming: Execution with Unnecessary Privileges
NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could execute privileged operations. A successful exploit of this vulnerability might lead to information disclosure, data tampering, escalation of privilege
- 8.1 High severity
NVIDIA Triton Inference Server: External Control of File Name or Path
NVIDIA Triton Inference Server for Linux contains a vulnerability in the tracing API, where a user can corrupt system files. A successful exploit of this vulnerability might lead to denial of service and data tampering.
- 7.5 High severity
ChatRTX: Improper Privilege Management
NVIDIA ChatRTX for Windows contains a vulnerability in ChatRTX UI, where a user can cause an improper privilege management issue by exploiting interprocess communication between different processes. A successful exploit of this vulnerability might lead to info
- 7.5 High severity
ChatRTX: Improper Privilege Management
NVIDIA ChatRTX for Windows contains a vulnerability in Chat RTX UI, where a user can cause an improper privilege management issue by sending user inputs to change execution flow. A successful exploit of this vulnerability might lead to information disclosure,
- 8.1 High severity
NVIDIA Triton Inference Server: Out-of-bounds Write
NVIDIA Triton Inference Server for Linux contains a vulnerability in shared memory APIs, where a user can cause an improper memory access issue by a network API. A successful exploit of this vulnerability might lead to denial of service and data tampering.
- 8.8 High severity
NVIDIA Triton Inference Server: External Control of File Name or Path
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitrary file. If this file exists, logs are appended to the file. A successful exploit of this vulnerability might lead to code execution, denia
- 8.2 High severity
ChatRTX: Improper Privilege Management
NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause improper privilege management by sending open file requests to the application. A successful exploit of this vulnerability might lead to local escalation of privileges,
- 7.5 High severity
NeMo: Allocation of Resources Without Limits or Throttling
NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerability may lead to a server-side denial of service.
- 7.8 High severity
vGPU driver, Cloud Gaming driver: Improper Authorization
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, where it allows a guest OS to allocate resources for which the guest OS is not authorized. A successful exploit of this vulnerability may lead to code execution, denial of service, escalat
- 7.1 High severity
GPU Display driver, vGPU driver, Cloud Gaming…: Access of Memory Location After End of Buffer
NVIDIA GPU Display Driver for Linux contains a vulnerability where an attacker may access a memory location after the end of the buffer. A successful exploit of this vulnerability may lead to denial of service and data tampering.
- 7.8 High severity
GPU Display driver, vGPU driver, Cloud Gaming…: Execution with Unnecessary Privileges
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer when the driver is performing an operation at a privilege level that is higher than the minimum level required. A successful exploit of this vulnerability may lead to code
- 7.8 High severity
GPU Display driver, vGPU driver, Cloud Gaming…: Out-of-bounds Read
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of
- 7.2 High severity
Bluefield 2 DPU BMC, BlueField 3 DPU BMC: Improper Neutralization of Special Elements used in an OS Command
NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network call. A successful exploit of this vulnerability may lead to code execution on the OS.
- 7.8 High severity
NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout…
NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be used to execute arbitrary code at the SMM level. A successful exploit of this vulnerability may lead to code execution, denial of service, esc
- 7.8 High severity
DGX A100: Integer Overflow or Wraparound
NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data ta
- 8.0 High severity
DGX A100: Missing Authentication for Critical Functionality
NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical function by an adjacent network . A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of servi
- 7.8 High severity
DGX A100: Out-of-bounds Write
NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, a
- 9.8 Critical severity
DGX A100: Out-of-bounds Write
NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, de
- 9.8 Critical severity
DGX A100: Out-of-bounds Write
NVIDIA DGX A100 baseboard management controller (BMC) contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may le
- 7.5 High severity
DGX A100: Improper Neutralization of Special Elements in Output Used by a Downstream Component
NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection. A successful exploit of this vulnerability may lead to information disclosure.
- 9.8 Critical severity
DGX A100: Out-of-bounds Write
NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execut
- 8.8 High severity
Triton Inference Server: Improper Limitation of a Pathname to a Restricted Directory
NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-default command line option --model-control explicit, an attacker may use the model load API to cause a relative path traversal. A successful
- 7.3 High severity
NVIDIA GPU Display driver, vGPU driver, and…: Uncontrolled Search Path Element
NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege to escalate privileges when an administrator is updating GPU drivers, which may lead to escalation of privileges.
- 7.1 High severity
NVIDIA GPU Display driver, vGPU driver, and…: Improper Access Control
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause improper access control, which may lead to denial of service or data tampering.
- 7.1 High severity
NVIDIA GPU Display driver, vGPU driver, and…: Improper Access Control
NVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver implementation does not restrict or incorrectly restricts access from the named pipe server to a connecting client, which may lead to potential impersonati
- 7.8 High severity
NVIDIA GPU Display driver, vGPU driver, and…: Files or Directories Accessible to External Parties
NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write arbitrary data to privileged locations by using reparse points. A successful exploit of this vulnerability may lead to code execution, denial of service, esca
- 7.8 High severity
NVIDIA GPU Display driver, vGPU driver, and…: Uncontrolled Search Path Element
NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or
- 7.8 High severity
DGX H100 BMC: Improper Authentication
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, code execution, and denial o
- 8.8 High severity
NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause…
NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure.
- 8.8 High severity
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause…
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure.