Vendor
NVIDIA
1,192 known vulnerabilities in products by NVIDIA, 0 of them actively exploited (CISA KEV).
Key figures
1,192
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
82
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2024-0132 | NVIDIA Container Toolkit: Time-of-check Time-of-use (TOCTOU) Race Condition | 9.0 | |
| Critical | CVE-2017-14491 | thekelleys dnsmasq: Heap-Based Buffer Overflow | 9.8 | |
| High | CVE-2026-65091 | NVIDIA OpenShell: OS Command Injection | 8.8 | |
| Critical | CVE-2024-0087 | NVIDIA Triton Inference Server: External Control of File Name or Path | 9.0 | |
| Critical | CVE-2026-24207 | NVIDIA Triton Inference Server: Authentication Bypass Using an Alternate Path or Channel | 9.8 | |
| Critical | CVE-2022-34668 | NVIDIA FLARE: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2019-5684 | NVIDIA GPU Driver: Out-of-Bounds Access | 10.0 | |
| Critical | CVE-2025-23266 | NVIDIA Container Toolkit: Untrusted Search Path | 9.0 | |
| Critical | CVE-2025-23311 | NVIDIA Triton Inference Server: Stack-based Buffer Overflow | 9.8 | |
| Critical | CVE-2019-5685 | NVIDIA GPU Driver: Out-of-Bounds Access | 9.8 | |
| Medium | CVE-2026-65086 | NVIDIA OpenShell: OS Command Injection | 6.8 | |
| Critical | CVE-2026-65130 | NVIDIA Infrastructure Controller: OS Command Injection | 8.0 | |
| High | CVE-2017-1000251 | NVIDIA Jetson TK1: Remote Code Execution | 8.0 | |
| High | CVE-2025-23359 | NVIDIA Container Toolkit: Time-of-check Time-of-use (TOCTOU) Race Condition | 8.3 | |
| High | CVE-2026-24208 | NVIDIA Triton Inference Server: Path Traversal | 5.3 | |
| Critical | CVE-2025-23310 | NVIDIA Triton Inference Server: Stack-based Buffer Overflow | 9.8 | |
| High | CVE-2024-0088 | NVIDIA Triton Inference Server: Improper Restriction of Operations within the Bounds of a Memory Buffer | 5.5 | |
| Critical | CVE-2025-23317 | NVIDIA Triton Inference Server: Heap-based Buffer Overflow | 9.1 | |
| Critical | CVE-2020-11486 | NVIDIA DGX Servers: Remote Code Execution | 9.8 | |
| Medium | CVE-2022-21820 | NVIDIA Data Center GPU Manager: Improper Input Validation | 6.3 | |
| Medium | CVE-2018-3639 | Intel Multiple: security vulnerability | 5.5 | |
| High | CVE-2026-24252 | NVIDIA NeMo Framework: OS Command Injection | 7.8 | |
| High | CVE-2026-65089 | NVIDIA NemoClaw: OS Command Injection | 7.8 | |
| High | CVE-2026-65090 | NVIDIA NemoClaw: OS Command Injection | 7.8 | |
| High | CVE-2026-65096 | NVIDIA NemoClaw: OS Command Injection | 7.8 |
News
- Exposed Nvidia GPU monitors can reveal AI infrastructure secretscsoonline,
- High-severity Nvidia bug could crash GPU monitoring on exposed serverstheregister-security,
- 58 hardware vulnerabilities: A guide to the threatscsoonline,
- NemoClaw’s AI can be poisoned through a browser tabcsoonline,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 21sans-atrisk,