Vulnerabilities > Nvidia > High

DATE CVE VULNERABILITY TITLE RISK
2023-11-02 CVE-2023-31016 Uncontrolled Search Path Element vulnerability in Nvidia Virtual GPU
NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.
local
low complexity
nvidia CWE-427
7.8
2023-11-02 CVE-2023-31017 Files or Directories Accessible to External Parties vulnerability in Nvidia Virtual GPU
NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write arbitrary data to privileged locations by using reparse points.
local
low complexity
nvidia CWE-552
7.8
2023-11-02 CVE-2023-31019 Unspecified vulnerability in Nvidia Virtual GPU
NVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver implementation does not restrict or incorrectly restricts access from the named pipe server to a connecting client, which may lead to potential impersonation to the client's secure context.
local
low complexity
nvidia
7.1
2023-11-02 CVE-2023-31020 Unspecified vulnerability in Nvidia Virtual GPU
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause improper access control, which may lead to denial of service or data tampering.
local
low complexity
nvidia
7.1
2023-11-02 CVE-2023-31027 Unspecified vulnerability in Nvidia Virtual GPU
NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege to escalate privileges when an administrator is updating GPU drivers, which may lead to escalation of privileges.
local
low complexity
nvidia
7.3
2023-09-20 CVE-2023-31010 Improper Input Validation vulnerability in Nvidia DGX H100 Firmware
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation.
network
low complexity
nvidia CWE-20
8.8
2023-09-20 CVE-2023-31011 Improper Input Validation vulnerability in Nvidia DGX H100 Firmware
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation.
network
low complexity
nvidia CWE-20
8.8
2023-09-20 CVE-2023-31012 Improper Input Validation vulnerability in Nvidia DGX H100 Firmware
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation.
network
low complexity
nvidia CWE-20
8.8
2023-09-20 CVE-2023-31013 Improper Input Validation vulnerability in Nvidia DGX H100 Firmware
NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation.
network
low complexity
nvidia CWE-20
8.8
2023-09-20 CVE-2023-31015 Improper Authentication vulnerability in Nvidia DGX H100 Firmware
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue.
local
low complexity
nvidia CWE-287
7.8