NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.
NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use race condition. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, and data tampering.
CVE-2026-24228 is a high-severity vulnerability in the NVIDIA NeMo Framework for Linux involving deserialization of untrusted data. Exploitation could allow an attacker with local access and low privileges to execute arbitrary code, escalate privileges, tamper with data, and disclose sensitive information. The vulnerability does not require user interaction but has limited attack vector scope (local). No patch or remediation details are currently provided.
NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
NVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.
NVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper index validation. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.
NVIDIA NVTabular has a vulnerability involving improper deserialization of untrusted data. Exploiting this flaw could allow an attacker with local privileges to execute arbitrary code, tamper with data, or disclose sensitive information. The vulnerability is rated high severity with a CVSS score of 7.8. No specific affected versions or patches are currently documented.
NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering and information disclosure.
CVE-2025-33221 is a medium severity vulnerability in the NVIDIA GeForce display driver for Windows and Linux. It involves improper input validation in the kernel driver that can cause incorrect permission assignment for a critical resource. Exploitation could lead to denial of service or data tampering, but no confidentiality or integrity impact is indicated. The vulnerability affects all driver versions prior to 595.71.05. There is no official patch or remediation level currently confirmed by the vendor. No known exploits are reported in the wild.
CVE-2026-24201 is a medium severity vulnerability in the NVIDIA Virtual GPU Manager involving an out-of-bounds write. This flaw could allow an attacker with local access and low privileges to cause data tampering, denial of service, or information disclosure. The vulnerability affects all versions up to and including the March 2026 release (version 595.58.02). No official patch or remediation guidance is currently available from NVIDIA, and no known exploits are reported in the wild.
CVE-2026-24200 is a use-after-free vulnerability in the NVIDIA Virtual GPU Manager affecting all versions up to and including the March 2026 release. Exploitation could lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution. The vulnerability has a high severity with a CVSS score of 7. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.
A vulnerability exists in the NVIDIA Display Driver for Linux in the kernel mode layer handler that improperly preserves permissions. Exploiting this flaw could allow a local user with limited privileges to cause denial of service, escalate privileges, disclose information, tamper with data, or execute arbitrary code. This affects all driver versions prior to 595.71.05. The vulnerability has a high severity score of 7.8 but no official patch or remediation guidance has been confirmed yet.
CVE-2026-24191 is a high-severity vulnerability in the NVIDIA Display Driver for Windows affecting GeForce products prior to version 596.36. It is a time-of-check time-of-use (TOCTOU) race condition that could allow an attacker to cause denial of service, escalate privileges, disclose information, tamper with data, or execute code. The vulnerability requires local access with low privileges and high attack complexity. No official patch or remediation guidance has been provided yet by NVIDIA. There are no known exploits in the wild at this time.
CVE-2026-24190 is a high-severity vulnerability in the NVIDIA GeForce display driver for Windows and Linux. It involves missing authorization checks in the kernel mode layer, allowing a local user with limited privileges to improperly access GPU resources. Exploiting this flaw could lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution. A patch is available to address this issue.
CVE-2026-24193 is a high-severity vulnerability in NVIDIA GeForce display drivers for Windows and Linux that allows an out-of-bounds write. Exploitation could lead to denial of service, privilege escalation, information disclosure, data tampering, or code execution. The issue affects all driver versions prior to 580.159.03. No official patch or remediation guidance is currently confirmed from the vendor. The vulnerability requires local access with low privileges and no user interaction is needed for exploitation.
CVE-2026-24196 is an out-of-bounds read vulnerability in the NVIDIA Display Driver for Linux affecting GeForce products. Exploitation could lead to denial of service and information disclosure. The vulnerability affects all driver versions prior to 595.71.05. The CVSS score is 7.1, indicating high severity. No official patch or remediation level has been confirmed yet. There are no known exploits in the wild at this time.
CVE-2026-24197 is a medium severity vulnerability in the NVIDIA GeForce Display Driver for Linux affecting Multi-Instance GPU (MIG) partition management. The issue arises from insecure default initialization of memory subsystem routing resources, which can cause data corruption or system hangs during partition reconfiguration. Exploitation could result in denial of service but does not impact confidentiality or integrity. The vulnerability affects all driver versions prior to 595.71.05. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.
A race condition vulnerability (CWE-362) exists in the NVIDIA Display Driver for Linux kernel module affecting GeForce drivers prior to version 595.71.05. This flaw arises from improper synchronization when reordering compiler or processor memory instructions. Exploitation could result in a denial of service condition. The vulnerability has a medium severity with a CVSS score of 4.7. No known exploits are reported in the wild. Patch status is not confirmed as no official fix or vendor advisory is provided.
A vulnerability in the NVIDIA GeForce GPU Display Driver for Linux allows an advanced attacker with high privileges to exploit a race condition that could leak sensitive memory. This exposure might lead to limited unauthorized disclosure of information, denial of service, and data tampering. The issue affects all driver versions prior to 595.71.05. No official patch or remediation guidance is currently confirmed from the vendor. The vulnerability has a medium severity rating with a CVSS score of 5.6.