Read the docs

NVIDIA

Records1248All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical86CVSS 9.0–10.0
CVSS high785CVSS 7.0–8.9

Exploited now

NVIDIA records in CISA KEV

No NVIDIA vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

15 records in Dgx Os · all components

Priority MEDIUM 41

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00182 Published 2025-11-25 No fix listed CWE-269
TI-2025-24132 CVE-2025-33195 · GHSA-c92j-gx9r-6644

Memory corruption in NVIDIA DGX Spark

Priority LOW 35

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected memory buffer operations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00158 Published 2025-11-25 No fix listed CWE-119
TI-2025-24127 CVE-2025-33190 · GHSA-rx36-mr4j-6x6g

Out-of-bounds write in NVIDIA DGX Spark

Priority LOW 35

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound write.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00169 Published 2025-11-25 No fix listed CWE-787
TI-2025-24126 CVE-2025-33189 · GHSA-f83q-jrfh-gq6m

Out-of-bounds write in NVIDIA DGX Spark

Priority LOW 35

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an out-of-bound write.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00192 Published 2025-11-25 No fix listed CWE-787
Priority LOW 34

NVIDIA DGX Spark GB10 contains a vulnerability in hardware resources where an attacker could tamper with hardware controls.

CVSS 3.1HIGH 8.0 Local No auth No interaction EPSS 0.00168 Published 2025-11-25 No fix listed CWE-269
Priority LOW 25

NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid memory read.

CVSS 3.1MEDIUM 5.7 Local No auth No interaction EPSS 0.00175 Published 2025-11-25 No fix listed CWE-20
TI-2025-24134 CVE-2025-33197 · GHSA-r9v6-9429-66g9

NULL pointer dereference in NVIDIA DGX Spark

Priority LOW 24

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a NULL pointer dereference.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00176 Published 2025-11-25 No fix listed CWE-476
Open these records in search →