Read the docs

NVIDIA

Records1248All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical86CVSS 9.0–10.0
CVSS high785CVSS 7.0–8.9

Exploited now

NVIDIA records in CISA KEV

No NVIDIA vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

81 records in Gpu Display Driver · all components

Priority MEDIUM 45

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, wh…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01133 Published 2022-05-17 No fix listed CWE-787
Priority MEDIUM 43

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-bounds write, which may lead to code execution, information disclosure, and denial of…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01472 Published 2022-12-30 No fix listed CWE-787
Priority MEDIUM 40

NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where an unauthorized attacker on the network can cause an out-of-bounds write through a specially crafte…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.0163 Published 2022-05-17 No fix listed CWE-787
TI-2026-19498 CVE-2026-24187 · GHSA-g33w-wj38-m7jr

Use after free in NVIDIA GeForce

Priority LOW 39

NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00188 Published 2026-05-26 Fixed in 595.71.05, 580.159.03 +1 CWE-416
Priority LOW 36

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclos…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00267 Published 2022-12-30 No fix listed CWE-120
Priority LOW 36

NVIDIA vGPU Display Driver for Linux guest contains a vulnerability in a D-Bus configuration file, where an unauthorized user in the guest VM can impact protected D-Bus endpoints, which may lead to code execution, denial…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0025 Published 2022-12-30 No fix listed CWE-281
TI-2022-13541 CVE-2022-31617 · GHSA-m2hf-3mjj-vh34

Out-of-bounds read in NVIDIA Cloud Gaming

Priority LOW 36

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds read, which may lead to code execution, denial…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00297 Published 2022-11-18 No fix listed CWE-125
TI-2022-13534 CVE-2022-31610 · GHSA-q65c-jg2w-cfcq

Out-of-bounds write in NVIDIA Cloud Gaming

Priority LOW 36

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds write, which may lead to code execution, denia…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00297 Published 2022-11-18 No fix listed CWE-787
Priority LOW 36

NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead to code execution, den…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00283 Published 2022-11-18 No fix listed CWE-281
TI-2022-13530 CVE-2022-31606 · GHSA-p4r9-p3jm-cp84

Out-of-bounds write in NVIDIA Cloud Gaming

Priority LOW 36

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a failure to properly validate data might allow an attacker with basic user capabili…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00403 Published 2022-11-18 No fix listed CWE-787
TI-2026-19504 CVE-2026-24193 · GHSA-7gvm-xr2x-wg8x

Out-of-bounds write in NVIDIA GeForce

Priority LOW 35

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00197 Published 2026-05-26 Fixed in 580.159.03, 535.309.01 +2 CWE-787
Priority LOW 35

NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leading to a heap buffer overflow.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00206 Published 2026-05-26 Fixed in 595.71.05, 580.159.03 +1 CWE-681
Priority LOW 35

NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00138 Published 2026-05-26 Fixed in 596.36, 582.53 +1 CWE-367
TI-2026-19501 CVE-2026-24190 · GHSA-95fc-m9jj-88x5

Missing authorization in NVIDIA GeForce

Priority LOW 35

NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00221 Published 2026-05-26 Fixed in 595.71.05, 580.159.03 +4 CWE-862
Priority LOW 35

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or inform…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00225 Published 2023-06-23 No fix listed CWE-822
Priority LOW 35

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclos…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00228 Published 2022-12-30 No fix listed CWE-787
Load more
Open these records in search →