nvidia

907 tracked vulnerabilities.

CVE-2026-24270 CRITICAL
Nvidia AIStore Framework - Authentication Bypass by Spoofing
Jul 01, 2026
CVSS 9.8
EPSS 0.01
CVE-2026-24266 MEDIUM
Nvidia Triton Inference Server - Use After Free
Jul 01, 2026
CVSS 5.9
EPSS 0.01
CVE-2026-24264 HIGH
Nvidia Triton Inference Server - Improper Handling of Highly Compressed Data (Data Amplification)
Jul 01, 2026
CVSS 7.5
EPSS 0.01
CVE-2026-24260 HIGH
Nvidia Container Toolkit - Time-of-check Time-of-use (TOCTOU) Race Condition
Jul 01, 2026
CVSS 8.5
EPSS 0.00
CVE-2026-24251 HIGH
Nvidia Megatron-Bridge - Deserialization of Untrusted Data
Jul 01, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-24250 HIGH
Nvidia Megatron-Bridge - Deserialization of Untrusted Data
Jul 01, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-24249 HIGH
Nvidia Megatron-Bridge - Improper Control of Generation of Code ('Code Injection')
Jul 01, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-24248 HIGH
Nvidia Megatron-Bridge - Improper Control of Generation of Code ('Code Injection')
Jul 01, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-24247 HIGH
Nvidia Megatron-Bridge - Deserialization of Untrusted Data
Jul 01, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-24246 HIGH
Nvidia Megatron-Bridge - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
Jul 01, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-24245 HIGH
Nvidia Megatron-Bridge - Deserialization of Untrusted Data
Jul 01, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-24244 HIGH
Nvidia Megatron-Bridge - Deserialization of Untrusted Data
Jul 01, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-24243 HIGH
Nvidia Megatron-Bridge - Deserialization of Untrusted Data
Jul 01, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-24242 HIGH
Nvidia Megatron-Bridge - Server-Side Request Forgery (SSRF)
Jul 01, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-24240 HIGH
Nvidia Megatron-Bridge - Deserialization of Untrusted Data
Jul 01, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-24228 HIGH
Nvidia NeMo Framework - Deserialization of Untrusted Data
Jun 16, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-24155 HIGH
Nvidia NeMo Framework - Improper Control of Generation of Code ('Code Injection')
Jun 16, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-24181 HIGH
Nvidia Dali - Improper Validation of Array Index
Jun 09, 2026
CVSS 7.3
EPSS 0.00
CVE-2026-24180 HIGH
Nvidia Dali - Heap-based Buffer Overflow
Jun 09, 2026
CVSS 7.3
EPSS 0.00
CVE-2026-24237 HIGH
Nvidia NVTabular - Deserialization of Untrusted Data
Jun 02, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-24221 HIGH
Nvidia NVTabular - Deserialization of Untrusted Data
Jun 02, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-24201 MEDIUM
Nvidia Virtual Gpu Manager - Out-of-bounds Write
May 26, 2026
CVSS 5.8
EPSS 0.00
CVE-2026-24200 HIGH
Nvidia Virtual Gpu Manager - Use After Free
May 26, 2026
CVSS 7.0
EPSS 0.00
CVE-2026-24199 MEDIUM
Nvidia GeForce - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
May 26, 2026
CVSS 4.7
EPSS 0.00
CVE-2026-24198 MEDIUM
Nvidia GeForce - Exposure of Sensitive Information to an Unauthorized Actor
May 26, 2026
CVSS 5.6
EPSS 0.00
Products
gpu_driver 127 virtual_gpu 98 gpu_display_driver 81 triton_inference_server 51 jetson_linux 49 cuda_toolkit 46 virtual_gpu_manager 39 cloud_gaming 37 geforce_experience 37 nemo 33 dgx_a100_firmware 28 GeForce 20 NVIDIA RTX, Quadro, NVS 20 Tesla 20 Triton Inference Server 18 shield_experience 17 dgx_h100_firmware 15 dgx_os 15 Guest driver 14 bmc 13 megatron-lm 13 nemo_megatron_bridge 13 GPU Display Drivers 12 RTX, Quadro, NVS 12 Virtual GPU Manager 12 Megatron-Bridge 11 jetson_tx1 11 jetson_tx2 11 cloud_gaming_guest 10 geforce_gtx_950 8
Quick Filters
Critical CVEs With Exploits In CISA KEV