CVE-2025-23278

CVE-2025-23278 is associated with the NVIDIA Display Driver (Windows/Linux). The connected advisories confirm the root cause as an improper index validation when a call is issued with crafted parameters, with the impact described as data tampering and potential denial of service. SUSE advisories ...

CVE-2025-23277

Concrete details found: CVE-2025-23277 affects NVIDIA Display Driver (kernel mode) with memory access outside allowed bounds. OpenSUSE/SUSE advisories describe fixes in NVIDIA open-driver packages (CUDA variant updated to 580.82.07; non-CUDA variant likewise updated) to address the issue, plus ot...

CVE-2025-23277

NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases. A successful exploit of this vulnerability might lead to denial of service, data tampering, or information...

CVE-2025-23277

NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases. A successful exploit of this vulnerability might lead to denial of service, data tampering, or information...

CVE-2025-23288: Exposure of Sensitive System Information to an Unauthorized Control Sphere

NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may cause an exposure of sensitive system information with local unprivileged system access. A successful exploit of this vulnerability may lead to Information disclosure...

CVE-2025-23287: Exposure of Sensitive System Information to an Unauthorized Control Sphere

NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may access sensitive system-level information. A successful exploit of this vulnerability may lead to Information disclosure...

CVE-2025-23281: Use After Free

NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker with local unprivileged access that can win a race condition might be able to trigger a use-after-free error. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data...

CVE-2025-23278: Improper Validation of Array Index

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted parameters. A successful exploit of this vulnerability might lead to data tampering or denial of service...

CVE-2025-23277: Improper Access Control

NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases. A successful exploit of this vulnerability might lead to denial of service, data tampering, or information...

NVIDIA GPU Display Driver buffer error vulnerability

NVIDIA GPU Display Driver is a display driver from NVIDIA Corporation. NVIDIA GPU Display Driver suffers from a buffer error vulnerability that stems from the possibility of reading invalid memory, which could lead to information disclosure...

CVE-2025-23286: Out-of-bounds Read

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read invalid memory. A successful exploit of this vulnerability might lead to information disclosure...

NVIDIA GPU Display Driver security vulnerabilities

NVIDIA GPU Display Driver is a display driver from NVIDIA. A security vulnerability exists in NVIDIA GPU Display Driver, which can be exploited by attackers to potentially cause an information leak...

NVIDIA GPU Display Driver security vulnerabilities

NVIDIA GPU Display Driver is a driver software from NVIDIA for interactive support of graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver, which can be exploited by attackers to potentially cause code execution, denial of service,...

NVIDIA GPU Display Driver Access Control Vulnerability

NVIDIA GPU Display Driver is a display driver from NVIDIA Corporation. The NVIDIA GPU Display Driver suffers from an Access Control Error vulnerability that stems from the kernel mode driver potentially accessing out-of-bounds memory, which could result in a denial of service, data tampering, or...

NVIDIA GPU Display Driver security vulnerabilities

NVIDIA GPU Display Driver is a display driver from NVIDIA. A security vulnerability exists in NVIDIA GPU Display Driver, which can be exploited by attackers to potentially cause an information leak...

NVIDIA GPU Display Driver input validation error vulnerability

NVIDIA GPU Display Driver is a display driver from NVIDIA Corporation. The NVIDIA GPU Display Driver suffers from an input validation error vulnerability that stems from a specially crafted parameter that results in improper index validation, which could lead to data tampering or denial of servic...

NVIDIA GPU Display Driver Resource Management Vulnerability

NVIDIA GPU Display Driver is a display driver from NVIDIA Corporation. A resource management error vulnerability exists in NVIDIA GPU Display Driver that originates from a local, unprivileged user that could trigger a post-release reuse error, which could result in code execution, elevation of...

Mozilla: Bypass of Restricted Keyword "Mozilla" in Display Name Field via Unicode Homoglyphs on addons.allizom.org

A restricted keyword bypass vulnerability was discovered on the Firefox Add-ons platform that allowed an attacker to register a display name visually identical to "Mozilla" by using a Unicode homoglyph character. This circumvented the intended restriction and could have been used to impersonate...

VulnCheck KEV: CVE-2014-125123

An unauthenticated SQL injection vulnerability exists in the Kloxo web hosting control panel developed by LXCenter prior to version 6.1.12. The flaw resides in the login-name parameter passed to lbin/webcommand.php, which fails to properly sanitize input, allowing an attacker to extract the...

CVE-2025-43217

The issue was addressed by adding additional logic. This issue is fixed in iPadOS 17.7.9, iOS 18.6 and iPadOS 18.6. Privacy Indicators for microphone or camera access may not be correctly displayed...