Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

39 records

Priority LOW 31

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it allows guests to control unauthorized resources, which may lead to integrity and confidentiality loss or information disclosur…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00219 Published 2021-04-29 No fix listed CWE-863
Priority LOW 32

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where there is the potential to write to a shared memory location and manipulate the data after the data has been validated, which may…

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00241 Published 2021-04-29 No fix listed CWE-20
Priority LOW 34

NVIDIA vGPU driver contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager (vGPU plugin), in which an input length is not validated, which may lead to information disclosure, tampering of data or…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0025 Published 2021-04-29 No fix listed CWE-20
Priority LOW 34

NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager (vGPU plugin), in which an input length is not validated, which may lead to information disclosure, tampering of data,…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0025 Published 2021-04-29 No fix listed CWE-1284
Priority LOW 34

NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU manager (vGPU plugin), in which an input length is not validated, which may lead to information disclosure, tampering of data,…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0025 Published 2021-04-29 No fix listed CWE-1284
Priority LOW 34

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), in which certain input data is not validated, which may lead to information disclosure, tampering of data, or denial of service.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0025 Published 2021-04-29 No fix listed CWE-20
Priority LOW 25

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not validated, which may lead to unexpected consumption of resources, which in turn may lead to denial of service.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00338 Published 2021-01-08 No fix listed CWE-20
Priority LOW 31

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not validated, which may lead to tampering of data or denial of service.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0035 Published 2021-01-08 No fix listed CWE-20
Priority LOW 31

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which it obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer, which may lead to informati…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00349 Published 2021-01-08 No fix listed CWE-476
Priority LOW 34

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input offset is not validated, which may lead to a buffer overread, which in turn may cause tampering of data, information disclosure, or denia…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00383 Published 2021-01-08 No fix listed CWE-125
Priority LOW 27

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which a race condition may cause the vGPU plugin to continue using a previously validated resource that has since changed, which may lead to denial of s…

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00203 Published 2021-01-08 No fix listed CWE-362
Priority LOW 31

NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in which an input index is not validated, which may lead to tampering of data or denial of service.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00349 Published 2021-01-08 No fix listed CWE-20
Priority LOW 34

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input index is not validated, which may lead to integer overflow, which in turn may cause tampering of data, information disclosure, or denial…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00382 Published 2021-01-08 No fix listed CWE-190
Priority LOW 34

NVIDIA Virtual GPU Manager NVIDIA vGPU manager contains a vulnerability in the vGPU plugin in which it allows guests to allocate some resources for which the guest is not authorized, which may lead to integrity and confi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00346 Published 2021-01-08 No fix listed CWE-770
Priority LOW 25

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it can dereference a NULL pointer, which may lead to denial of service.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00289 Published 2020-10-02 No fix listed CWE-476
TI-2020-04903 CVE-2020-5988 · GHSA-8v9h-cmm6-q9vj

Double free in NVIDIA vGPU Software

Priority LOW 31

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which allocated memory can be freed twice, which may lead to information disclosure or denial of service.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00306 Published 2020-10-02 No fix listed CWE-415
Priority LOW 34

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which guest-supplied parameters remain writable by the guest after the plugin has validated them, which may lead to the guest being able to pass i…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00323 Published 2020-10-02 No fix listed CWE-459
Priority LOW 25

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data size is not validated, which may lead to tampering or denial of service.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00275 Published 2020-10-02 No fix listed CWE-20
Priority LOW 31

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data length is not validated, which may lead to tampering or denial of service.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0028 Published 2020-10-02 No fix listed CWE-20
TI-2020-04899 CVE-2020-5984 · GHSA-h29p-vgfp-4fcp

Use after free in NVIDIA vGPU Software

Priority LOW 34

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which it may have the use-after-free vulnerability while freeing some resources, which may lead to denial of service, code execution, and informat…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00366 Published 2020-10-02 No fix listed CWE-416
Priority LOW 31

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin and the host driver kernel module, in which the potential exists to write to a memory location that is outside the intended boundary of the frame buf…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00322 Published 2020-10-02 No fix listed CWE-787
Load more