Vulnerabilities > Nvidia

DATE CVE VULNERABILITY TITLE RISK
2023-11-02 CVE-2023-31027 Unspecified vulnerability in Nvidia Virtual GPU
NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege to escalate privileges when an administrator is updating GPU drivers, which may lead to escalation of privileges.
local
low complexity
nvidia
7.3
2023-09-27 CVE-2023-44216 Information Exposure Through Discrepancy vulnerability in multiple products
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue.
5.3
2023-09-20 CVE-2023-31010 Improper Input Validation vulnerability in Nvidia DGX H100 Firmware
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation.
network
low complexity
nvidia CWE-20
8.8
2023-09-20 CVE-2023-31011 Improper Input Validation vulnerability in Nvidia DGX H100 Firmware
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation.
network
low complexity
nvidia CWE-20
8.8
2023-09-20 CVE-2023-31012 Improper Input Validation vulnerability in Nvidia DGX H100 Firmware
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation.
network
low complexity
nvidia CWE-20
8.8
2023-09-20 CVE-2023-31013 Improper Input Validation vulnerability in Nvidia DGX H100 Firmware
NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation.
network
low complexity
nvidia CWE-20
8.8
2023-09-20 CVE-2023-31014 Exposure of Resource to Wrong Sphere vulnerability in Nvidia Geforce NOW 6.00.32705137/6.04.33108832
NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component.
local
low complexity
nvidia CWE-668
4.8
2023-09-20 CVE-2023-31015 Improper Authentication vulnerability in Nvidia DGX H100 Firmware
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue.
local
low complexity
nvidia CWE-287
7.8
2023-09-20 CVE-2023-25525 Unspecified vulnerability in Nvidia Cumulus Linux 5.5.0
NVIDIA Cumulus Linux contains a vulnerability in forwarding where a VxLAN-encapsulated IPv6 packet received on an SVI interface with DMAC/DIPv6 set to the link-local address of the SVI interface may be incorrectly forwarded.
network
low complexity
nvidia
7.5
2023-09-20 CVE-2023-25526 Unspecified vulnerability in Nvidia Cumulus Linux
NVIDIA Cumulus Linux contains a vulnerability in neighmgrd and nlmanager where an attacker on an adjacent network may cause an uncaught exception by injecting a crafted packet.
low complexity
nvidia
6.5