Priority MEDIUM 45
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, wh…
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.01133 · Published 2022-05-17 · No fix listed CWE-787
Priority MEDIUM 40
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00275 · Published 2023-04-01 · No fix listed CWE-822
Priority MEDIUM 40
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can access or modify system files or other files that are critical to the application, which may l…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00284 · Published 2022-12-30 · No fix listed CWE-73
Priority MEDIUM 40
NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where an unauthorized attacker on the network can cause an out-of-bounds write through a specially crafte…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.0163 · Published 2022-05-17 · No fix listed CWE-787
Priority LOW 37
NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege to escalate privileges when an administrator is updating GPU drivers, which may lead to escalation of…
CVSS 3.1HIGH 8.2· Local · Low privileges · User interaction · EPSS 0.00217 · Published 2023-11-02 · No fix listed CWE-427
Priority LOW 36
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00237 · Published 2024-06-13 · No fix listed CWE-822
Priority LOW 36
NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00275 · Published 2024-06-13 · No fix listed CWE-787
Priority LOW 36
NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2024-06-13 · No fix listed CWE-665
Priority LOW 36
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use of an out-of-range pointer offset, which may lead to data tampering, data loss,…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00268 · Published 2022-12-30 · No fix listed CWE-823
Priority LOW 36
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclos…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00267 · Published 2022-12-30 · No fix listed CWE-120
Priority LOW 36
NVIDIA vGPU Display Driver for Linux guest contains a vulnerability in a D-Bus configuration file, where an unauthorized user in the guest VM can impact protected D-Bus endpoints, which may lead to code execution, denial…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0025 · Published 2022-12-30 · No fix listed CWE-281
Priority LOW 36
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or data tampering.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00253 · Published 2022-12-30 · No fix listed CWE-197
Priority LOW 36
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive of smaller size causes…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00279 · Published 2022-12-30 · No fix listed CWE-197
Priority LOW 36
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds read, which may lead to code execution, denial…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00297 · Published 2022-11-18 · No fix listed CWE-125
Priority LOW 36
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it may double-free some resources.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00275 · Published 2022-08-05 · No fix listed CWE-415
Priority LOW 36
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds write, which may lead to code execution, denia…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00297 · Published 2022-11-18 · No fix listed CWE-787
Priority LOW 36
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a failure to properly validate data might allow an attacker with basic user capabili…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00403 · Published 2022-11-18 · No fix listed CWE-787
Priority LOW 35
NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0012 · Published 2024-06-13 · No fix listed CWE-266
Priority LOW 35
NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could execute privileged operations.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00229 · Published 2024-06-13 · No fix listed CWE-250
Priority LOW 35
NVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver implementation does not restrict or incorrectly restricts access from the named pipe server to a connecting client,…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00176 · Published 2023-11-02 · No fix listed CWE-284
Priority LOW 35
NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write arbitrary data to privileged locations by using reparse points.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00205 · Published 2023-11-02 · No fix listed CWE-552
Priority LOW 35
NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00227 · Published 2023-11-02 · No fix listed CWE-427
Priority LOW 35
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or inform…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00225 · Published 2023-06-23 · No fix listed CWE-822
Priority LOW 35
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of service, information disclosure, and data tampering.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00197 · Published 2023-04-01 · No fix listed CWE-787
Priority LOW 35
NVIDIA GPU Display Driver for Windows contains a vulnerability where a regular user can cause an out-of-bounds read, which may lead to code execution, denial of service, escalation of privileges, information disclosure,…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0012 · Published 2022-12-30 · No fix listed CWE-345
Load more