NVIDIA vulnerabilities
We track 582 vulnerabilities in NVIDIA products across 60+ products. 582 are rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2026.
Latest NVIDIA vulnerabilities
- 7.8 High severity
vGPU software (guest driver) - Windows, NVIDIA…: Externally Controlled Reference to a Resource in Another Sphere
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can access or modify system files or other files that are critical to the application, which may lead to code execution, denial of service
- 7.8 High severity
NVIDIA Cloud Gaming (guest driver): Out-of-bounds Read
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds read, which may lead to code execution, denial of service, escalation of privileges, i
- 7.1 High severity
NVIDIA Cloud Gaming (guest driver): Out-of-bounds Read
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to denial of service, or information di
- 7.1 High severity
NVIDIA Cloud Gaming (guest driver): Out-of-bounds Read
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to a system crash or a leak of internal
- 7.8 High severity
NVIDIA Cloud Gaming (guest driver): Out-of-bounds Write
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds write, which may lead to code execution, denial of service, escalation of privileges,
- 7.8 High severity
GeForce, Workstation, Compute: Improper Preservation of Permissions
NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges
- 7.8 High severity
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer…
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of privileges, data tampering, an
- 7.8 High severity
NVIDIA Cloud Gaming (guest driver): Out-of-bounds Write
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a failure to properly validate data might allow an attacker with basic user capabilities to cause an out-of-bounds access in
- 8.6 High severity
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability…
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and
- 9.8 Critical severity
NVIDIA FLARE: Deserialization of Untrusted Data
NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity
- 7.8 High severity
NVIDIA Virtual GPU Software and NVIDIA Cloud…: Double Free
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it may double-free some resources. An attacker may exploit this vulnerability with other vulnerabilities to cause denial of service, code execution, and information di
- 7.8 High severity
NVIDIA Virtual GPU Software and NVIDIA Cloud…: Improper Authorization
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows the guest VM to allocate resources for which the guest is not authorized. This vulnerability may lead to loss of data integrity and confidentiality, denial
- 8.2 High severity
NVIDIA DGX A100: Integer Overflow or Wraparound
NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vulnerability to this vulnerability, causing an integer overflow, possibly leading to code execution, escalation of privileges, denial of serv
- 8.2 High severity
NVIDIA DGX A100: Out-of-bounds Write
NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information
- 7.5 High severity
NVIDIA FLARE: Deserialization of Untrusted Data
NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load() instead of yaml.safe_load(). The deserialization of Untrusted Data, may allow an unprivileged network attacker to cause Remote Code Exec
- 7.5 High severity
NVIDIA FLARE: Deserialization of Untrusted Data
NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via pickle and no safe deserialization. The deserialization of Untrusted Data may allow an unprivileged network attacker to ca
- 7.1 High severity
NVIDIA GPU Display Driver: Out-of-bounds Write
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the ECC layer, where an unprivileged regular user can cause an out-of-bounds write, which may lead to denial of service and data tampering.
- 7.8 High severity
NVIDIA GPU Display Driver: Improper Access Control
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can access administrator- privileged registers, which may lead to denial of service,
- 7.1 High severity
NVIDIA GPU Display Driver: Out-of-bounds Read
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause an out-of-bounds read, which may lead to denial of service and information disclosure.
- 9.9 Critical severity
NVIDIA GPU Display Driver: Out-of-bounds Write
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial o
- 7.8 High severity
NVIDIA FLARE: Allocation of Resources Without Limits or Throttling
NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable.
- 7.6 High severity
Jetson Nano, Jetson Nano 2GB: Incorrect Permission Assignment for Critical Resource
NVIDIA distributions of Jetson Linux contain a vulnerability where an error in the IOMMU configuration may allow an unprivileged attacker with physical access to the board direct read/write access to the entire system address space through the PCI bus. Such an