CVE Program partner

nvidia

NVIDIA Corporation

API
CVEs, 365 days4311,252 all time, 59 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationNVIDIA Corporation
RoleCNA
TypeVendor
Reports tomitre
ScopeNVIDIA issues only.
Advisorieshttps://www.nvidia.com/en-us/security/

Latest CVEs · RSS

  • CVE-2026-65180 2026-10-13 · CVSS 7.8
    NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A
  • CVE-2026-65104 2026-10-13 · CVSS 7.1
    NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference reques
  • CVE-2026-65110 2026-10-13 · CVSS 7.8
    NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file.
  • CVE-2026-65131 2026-10-13 · CVSS 6.0
    NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable
  • CVE-2026-65172 2026-10-13 · CVSS 8.6
    NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may ac
  • CVE-2026-65164 2026-10-13 · CVSS 8.1
    NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitat
  • CVE-2026-65173 2026-10-13 · CVSS 9.1
    NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit cr
  • CVE-2026-65101 2026-10-13 · CVSS 8.6
    NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a cra
  • CVE-2026-65170 2026-10-13 · CVSS 8.6
    NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery
  • CVE-2026-65162 2026-10-13 · CVSS 10.0
    NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-nam
  • CVE-2026-65161 2026-10-13 · CVSS 7.5
    NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by
  • CVE-2026-65103 2026-10-13 · CVSS 8.1
    NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause
  • CVE-2026-67456 2026-10-13 · CVSS 4.4
    NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial
  • CVE-2026-65148 2026-10-13 · CVSS 7.3
    NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code
  • CVE-2026-65150 2026-10-13 · CVSS 7.3
    NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to
  • CVE-2026-65149 2026-10-13 · CVSS 7.3
    NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to
  • CVE-2026-65147 2026-10-13 · CVSS 7.3
    NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to
  • CVE-2026-65141 2026-10-13 · CVSS 7.8
    NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code executi
  • CVE-2026-65142 2026-10-06 · CVSS 7.8
    NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might
  • CVE-2026-65122 2026-10-06 · CVSS 5.5
    NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this vulnerability may lead to denial of ser
  • CVE-2026-47539 2026-09-30 · CVSS 6.7
    NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect numeric conversion. A suc
  • CVE-2026-47496 2026-09-30 · CVSS 7.3
    NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where a guest VM user may cause an out-of-bounds write by
  • CVE-2026-47574 2026-09-30 · CVSS 7.8
    NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability where an attacker could cause incorrect resource transfer between spheres. A successful explo
  • CVE-2026-47544 2026-09-30 · CVSS 7.8
    NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful ex
  • CVE-2026-47541 2026-09-30 · CVSS 7.8
    NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful e

All CVE Program partners