Threat database

CVE-2026-24182 is a medium severity vulnerability in NVIDIA GeForce display drivers for Windows and Linux. It involves improper locking that could allow an attacker to leak held driver locks. Exploitation of this flaw may result in a denial of service condition. The issue affects all driver versions prior to 595.71.05. No official patch or remediation guidance has been confirmed yet. There are no known exploits in the wild at this time.

NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A successful exploit of this vulnerability might lead to denial of service.

A vulnerability in the NVIDIA Display Driver for Linux allows an attacker to exploit an incorrect conversion between numeric types, resulting in a heap buffer overflow. This flaw affects all driver versions prior to 595.71.05. Successful exploitation could lead to denial of service, privilege escalation, information disclosure, data tampering, and remote code execution. The vulnerability has a high severity rating with a CVSS score of 7.8. No official patch or remediation level has been confirmed at this time. There are no known exploits in the wild currently.

CVE-2026-24187 is a use-after-free vulnerability in the NVIDIA Display Driver for Linux affecting GeForce products. Exploitation could allow an attacker with local access to cause denial of service, escalate privileges, disclose information, tamper with data, or execute arbitrary code. The vulnerability affects all driver versions prior to 595.71.05. There is no official patch or remediation level confirmed at this time. The vulnerability has a high severity score of 8.8 and no known exploits in the wild have been reported.

NVIDIA Merlin Transformers4Rec for Linux contains a deserialization vulnerability (CWE-502) that improperly handles untrusted data. This vulnerability affects all versions prior to March 11, 2026. Exploitation could result in code execution, data tampering, and information disclosure. The vulnerability has a high severity CVSS score of 7.8. No official patch or remediation guidance has been provided by NVIDIA at this time. There are no known exploits reported in the wild.

NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

NVIDIA BioNeMo Core for Linux has a path traversal vulnerability (CWE-29) that allows a user to load a malicious file using a crafted path such as '\.. \filename'. Exploiting this vulnerability could lead to code execution, denial of service, information disclosure, and data tampering. The vulnerability has a high severity with a CVSS score of 8.8. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

CVE-2026-24216 is a high-severity vulnerability in the NVIDIA BioNeMo Framework for Linux involving deserialization of untrusted data. Exploitation could allow an attacker to execute code, cause denial of service, disclose information, or tamper with data. The vulnerability requires local access with low complexity and user interaction. No official patch or remediation guidance has been provided yet.

NVIDIA DGX OS has a vulnerability in its factory provisioning process where cloning a base image results in identical SSH host keys being deployed across multiple systems. This reuse of cryptographic identifiers allows potential host impersonation or man-in-the-middle attacks. Exploiting this vulnerability could lead to code execution, data tampering, privilege escalation, information disclosure, and denial of service. The vulnerability is tracked as CVE-2026-24218 with a high severity score of 8.1. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

NVIDIA TensorRT has a high-severity vulnerability (CVE-2026-24188) involving an out-of-bounds write (CWE-787). Exploiting this flaw could allow an attacker to tamper with data. The vulnerability does not require user interaction or privileges and can be exploited remotely. There is no official patch or remediation level currently provided by NVIDIA. No known exploits are reported in the wild at this time.

NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure.

NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure.

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, data tampering, or denial of service.

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, or information disclosure.

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of service.