Vulnerabilities > Nvidia > Virtual GPU

DATE CVE VULNERABILITY TITLE RISK
2022-05-17 CVE-2022-28181 Out-of-bounds Write vulnerability in Nvidia GPU Display Driver and Virtual GPU
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
network
low complexity
nvidia CWE-787
critical
9.9
2022-05-17 CVE-2022-28183 Out-of-bounds Read vulnerability in Nvidia GPU Display Driver and Virtual GPU
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause an out-of-bounds read, which may lead to denial of service and information disclosure.
local
low complexity
nvidia CWE-125
7.1
2022-05-17 CVE-2022-28184 Unspecified vulnerability in Nvidia GPU Display Driver and Virtual GPU
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can access administrator- privileged registers, which may lead to denial of service, information disclosure, and data tampering.
local
low complexity
nvidia
7.8
2022-05-17 CVE-2022-28185 Out-of-bounds Write vulnerability in Nvidia Virtual GPU
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the ECC layer, where an unprivileged regular user can cause an out-of-bounds write, which may lead to denial of service and data tampering.
local
low complexity
nvidia CWE-787
7.1
2022-05-17 CVE-2022-28191 Resource Exhaustion vulnerability in Nvidia Virtual GPU
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where uncontrolled resource consumption can be triggered by an unprivileged regular user, which may lead to denial of service.
local
low complexity
nvidia CWE-400
5.5
2022-02-07 CVE-2022-21813 Improper Handling of Exceptional Conditions vulnerability in Nvidia products
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service.
local
low complexity
nvidia CWE-755
6.1
2022-02-07 CVE-2022-21815 NULL Pointer Dereference vulnerability in Nvidia products
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of service in the form of a system crash.
local
low complexity
nvidia CWE-476
5.5
2022-02-07 CVE-2022-21816 Missing Authentication for Critical Function vulnerability in Nvidia Cloud Gaming Virtual GPU and Virtual GPU
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where a user in the guest OS can cause a GPU interrupt storm on the hypervisor host, leading to a denial of service.
local
low complexity
nvidia CWE-306
5.5
2021-10-29 CVE-2021-1118 Improper Privilege Management vulnerability in Nvidia Virtual GPU
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where there is the potential to execute privileged operations by the guest OS, which may lead to information disclosure, data tampering, escalation of privileges, and denial of service
local
low complexity
nvidia CWE-269
7.8
2021-10-29 CVE-2021-1119 Double Free vulnerability in Nvidia Virtual GPU
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can double-free a pointer, which may lead to denial of service.
local
low complexity
nvidia CWE-415
7.1