CVE-2025-33231

MEDIUM

NVIDIA Nsight Systems - Code Execution

Title source: llm

Description

NVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading mechanism where an attacker could cause an uncontrolled search path element by exploiting insecure DLL search paths. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service and information disclosure.

Scores

CVSS v3 6.7
EPSS 0.0002
EPSS Percentile 3.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-427
Status published

Affected Products (1)

nvidia/cuda_toolkit < 13.1.0

Timeline

Published Jan 20, 2026
Tracked Since Feb 18, 2026