Priority MEDIUM 45
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, wh…
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.01133 · Published 2022-05-17 · No fix listed CWE-787
Priority MEDIUM 43
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-bounds write, which may lead to code execution, information disclosure, and denial of…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01472 · Published 2022-12-30 · No fix listed CWE-787
Priority MEDIUM 40
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler which may lead to denial of service, escalation of privileges, information disclosure, and data tampering.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.0026 · Published 2023-04-22 · No fix listed CWE-822
Priority MEDIUM 40
NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where an unauthorized attacker on the network can cause an out-of-bounds write through a specially crafte…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.0163 · Published 2022-05-17 · No fix listed CWE-787
Priority LOW 39
NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00188 · Published 2026-05-26 · Fixed in 595.71.05, 580.159.03 +1 CWE-416
Priority LOW 36
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00237 · Published 2024-06-13 · No fix listed CWE-822
Priority LOW 36
NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00275 · Published 2024-06-13 · No fix listed CWE-787
Priority LOW 36
NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2024-06-13 · No fix listed CWE-665
Priority LOW 36
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use of an out-of-range pointer offset, which may lead to data tampering, data loss,…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00268 · Published 2022-12-30 · No fix listed CWE-823
Priority LOW 36
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclos…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00267 · Published 2022-12-30 · No fix listed CWE-120
Priority LOW 36
NVIDIA vGPU Display Driver for Linux guest contains a vulnerability in a D-Bus configuration file, where an unauthorized user in the guest VM can impact protected D-Bus endpoints, which may lead to code execution, denial…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0025 · Published 2022-12-30 · No fix listed CWE-281
Priority LOW 36
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive of smaller size causes…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00279 · Published 2022-12-30 · No fix listed CWE-197
Priority LOW 36
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds read, which may lead to code execution, denial…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00297 · Published 2022-11-18 · No fix listed CWE-125
Priority LOW 36
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds write, which may lead to code execution, denia…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00297 · Published 2022-11-18 · No fix listed CWE-787
Priority LOW 36
NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead to code execution, den…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00283 · Published 2022-11-18 · No fix listed CWE-281
Priority LOW 36
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a failure to properly validate data might allow an attacker with basic user capabili…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00403 · Published 2022-11-18 · No fix listed CWE-787
Priority LOW 35
NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00152 · Published 2026-05-26 · Fixed in 595.71.05, 580.159.03 +1 CWE-281
Priority LOW 35
NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00197 · Published 2026-05-26 · Fixed in 580.159.03, 535.309.01 +2 CWE-787
Priority LOW 35
NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leading to a heap buffer overflow.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00206 · Published 2026-05-26 · Fixed in 595.71.05, 580.159.03 +1 CWE-681
Priority LOW 35
NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00138 · Published 2026-05-26 · Fixed in 596.36, 582.53 +1 CWE-367
Priority LOW 35
NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00221 · Published 2026-05-26 · Fixed in 595.71.05, 580.159.03 +4 CWE-862
Priority LOW 35
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or inform…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00225 · Published 2023-06-23 · No fix listed CWE-822
Priority LOW 35
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclos…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00228 · Published 2022-12-30 · No fix listed CWE-787
Priority LOW 34
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00455 · Published 2024-08-08 · No fix listed CWE-125
Priority LOW 34
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, data tampering, or information disclosure.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00259 · Published 2022-12-30 · No fix listed CWE-125
Load more