Priority MEDIUM 40
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can access or modify system files or other files that are critical to the application, which may l…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00284 · Published 2022-12-30 · No fix listed CWE-73
Priority LOW 36
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00237 · Published 2024-06-13 · No fix listed CWE-822
Priority LOW 36
NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00275 · Published 2024-06-13 · No fix listed CWE-787
Priority LOW 36
NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2024-06-13 · No fix listed CWE-665
Priority LOW 36
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use of an out-of-range pointer offset, which may lead to data tampering, data loss,…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00268 · Published 2022-12-30 · No fix listed CWE-823
Priority LOW 36
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclos…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00267 · Published 2022-12-30 · No fix listed CWE-120
Priority LOW 36
NVIDIA vGPU Display Driver for Linux guest contains a vulnerability in a D-Bus configuration file, where an unauthorized user in the guest VM can impact protected D-Bus endpoints, which may lead to code execution, denial…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0025 · Published 2022-12-30 · No fix listed CWE-281
Priority LOW 36
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or data tampering.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00253 · Published 2022-12-30 · No fix listed CWE-197
Priority LOW 36
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive of smaller size causes…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00279 · Published 2022-12-30 · No fix listed CWE-197
Priority LOW 35
NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0012 · Published 2024-06-13 · No fix listed CWE-266
Priority LOW 35
NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could execute privileged operations.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00229 · Published 2024-06-13 · No fix listed CWE-250
Priority LOW 35
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or inform…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00225 · Published 2023-06-23 · No fix listed CWE-822
Priority LOW 35
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclos…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00228 · Published 2022-12-30 · No fix listed CWE-787
Priority LOW 35
NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can compromise the security of the software by gaining privileges, reading sensitive information, or ex…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00213 · Published 2022-12-30 · No fix listed CWE-284
Priority LOW 34
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00455 · Published 2024-08-08 · No fix listed CWE-125
Priority LOW 34
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow in index validation may lead to denial of service, information disclosure, or data tampering.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00259 · Published 2022-12-30 · No fix listed CWE-190
Priority LOW 34
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, information disclosure, or data tampering.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00259 · Published 2022-12-30 · No fix listed CWE-787
Priority LOW 34
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, data tampering, or information disclosure.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00259 · Published 2022-12-30 · No fix listed CWE-125
Priority LOW 33
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an Integer overflow may lead to denial of service or information disclosure.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00263 · Published 2022-12-30 · No fix listed CWE-190
Priority LOW 32
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to denial of service, data tampering, or information disclosure.
CVSS 3.1HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.00276 · Published 2022-12-30 · No fix listed CWE-190
Priority LOW 32
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to information disclosure, data tampering or denial of service.
CVSS 3.1HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.00276 · Published 2022-12-30 · No fix listed CWE-190
Priority LOW 31
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an off-by-one error may lead to data tampering or information disclosure.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00256 · Published 2022-12-30 · No fix listed CWE-125
Priority LOW 31
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be truncated, which may lead to denial of service or data tamperin…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00281 · Published 2022-12-30 · No fix listed CWE-125
Priority LOW 30
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where a helper function maps more physical pages than were requested, which may lead to undefined behavior or an information…
CVSS 3.1MEDIUM 6.8· Local · No auth · No interaction · EPSS 0.00274 · Published 2022-12-30 · No fix listed CWE-200
Priority LOW 28
NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorized to have access to that information.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2024-06-13 · No fix listed CWE-200
Load more