PRIOn Logo

Search KB


Search our pre-analyzed vulnerability database

Total Results: 536

of 27

Published:   Updated:

Vulnerability Type: Design/Logic Flaw

Vendor(s):  Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v37.3

NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege to escalate privileges when an administrator is updating GPU drivers, which may lead to escalation of privileges.

Published:   Updated:

Vulnerability Type: Null pointer dereference

Vendor(s):  Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v35.5

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a NULL-pointer dereference may lead to denial of service.

Published:   Updated:

Vulnerability Type: Design/Logic Flaw

Vendor(s):  Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v35.5

NVIDIA Display Driver for Windows contains a vulnerability where an attacker may cause a pointer dereference of an untrusted value, which may lead to denial of service.

Published:   Updated:

Vulnerability Type: Null pointer dereference

Vendor(s):  Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v35.5

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a NULL-pointer dereference may lead to denial of service.

Published:   Updated:

Vulnerability Type: Null pointer dereference

Vendor(s):  Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v35.5

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a malicious user in the guest VM can cause a NULL-pointer dereference, which may lead to denial of service.

Published:   Updated:

Vulnerability Type: Improper access control

Vendor(s):  Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v37.1

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause improper access control, which may lead to denial of service or data tampering.

Published:   Updated:

Vulnerability Type: Design/Logic Flaw

Vendor(s):  Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v37.1

NVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver implementation does not restrict or incorrectly restricts access from the named pipe server to a connecting client, which may lead to potential impersonation to the client's secure context.

Published:   Updated:

Vulnerability Type: Null pointer dereference

Vendor(s):  Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v35.5

NVIDIA GPU Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a NULL-pointer dereference, which may lead to denial of service.

Published:   Updated:

Vulnerability Type: Design/Logic Flaw

Vendor(s):  Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v37.8

NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write arbitrary data to privileged locations by using reparse points. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

Published:   Updated:

Vulnerability Type: Design/Logic Flaw

Vendor(s):  Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v37.8

NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

Published:   Updated:

Vulnerability Type: Design/Logic Flaw

Vendor(s):  Amd, Apple, Canonical, Google, Intel, Microsoft, Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v35.3

PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately determine text contained on a web page from one origin if they control a resource from a different origin.

Published:   Updated:

Vulnerability Type: Authentication flaw

Vendor(s):  Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v37.8

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, code execution, and denial of service.

Published:   Updated:

Vulnerability Type: Design/Logic Flaw

Vendor(s):  Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v34.8

NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component. A successful exploit of this vulnerability may lead to limited information disclosure, denial of service, and code execution.

Published:   Updated:

Vulnerability Type: Input validation

Vendor(s):  Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v38.8

NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure.

Published:   Updated:

Vulnerability Type: Input validation

Vendor(s):  Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v38.8

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure.

Published:   Updated:

Vulnerability Type: Input validation

Vendor(s):  Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v38.8

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure.

Published:   Updated:

Vulnerability Type: Input validation

Vendor(s):  Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v38.8

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, and denial of service.

Published:   Updated:

Vulnerability Type: Input validation

Vendor(s):  Nvidia
Significant
Remediate Within one Month
CVSS v2N/ACVSS v39.8

NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure.

Published:   Updated:

Vulnerability Type: Input validation

Vendor(s):  Nvidia
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v37.8

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of services, escalation of privileges, and information disclosure.

Published:   Updated:

Vulnerability Type: Input validation

Vendor(s):  Nvidia
Significant
Remediate Within one Month
CVSS v2N/ACVSS v39.8

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

of 27