CVE-2025-33217

NVIDIA’s January 2026 security bulletin addresses CVEs affecting Windows/Linux drivers and vGPU software. CVE-2025-33217 (Windows Display Driver) and CVE-2025-33218 (kernel-mode nvlddmkm.sys) can lead to code execution, privilege escalation, data tampering, DoS, or disclosure via use-after-free/o...

PT-2026-5170

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys, where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or...

NVIDIA vGPU resource management error vulnerability

NVIDIA vGPU is a virtual GPU technology developed by NVIDIA Corporation in the United States. NVIDIA vGPU has a resource management vulnerability, which stems from issues with the virtual GPU manager regarding reusing resources after release. This vulnerability may lead to code execution, privile...

PT-2026-5169

Name of the Vulnerable Software and Affected Versions NVIDIA Display Driver for Windows affected versions not specified Description The NVIDIA Display Driver for Windows has a flaw that allows an attacker to trigger a use after free condition. Exploitation of this issue could result in code...

Security Bulletin: NVIDIA GPU Display Drivers - January 2026

NVIDIA has released a software security update for NVIDIA GPU Display Driver to address the issues that are disclosed in this bulletin. To protect your system, download and install this software update through the NVIDIA Driver Downloads page or, for the vGPU software and Cloud Gaming updates,...

PT-2026-5173

NVIDIA HD Audio Driver for Windows contains a vulnerability where an attacker could exploit a NULL pointer dereference issue. A successful exploit of this vulnerability might lead to a denial of service...

PT-2026-5171

Name of the Vulnerable Software and Affected Versions NVIDIA Display Driver for Linux affected versions not specified Description The NVIDIA Display Driver for Linux contains a flaw in the NVIDIA kernel module that could allow an attacker to trigger an integer overflow or wraparound. Exploitation...

NVIDIA Display Driver Resource Management Vulnerability

NVIDIA Display Driver is a graphics driver developed by NVIDIA Corporation. NVIDIA Display Driver has a resource management vulnerability that stems from the reuse of resources after they are released. This vulnerability may lead to code execution, privilege escalation, data corruption, denial of...

PT-2026-5172

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is freed. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or...

NVIDIA GPU Display Driver for Windows: Input validation error vulnerability

NVIDIA GPU Display Driver for Windows is a driver software developed by NVIDIA Corporation for interaction with the graphics card display module in Windows systems. NVIDIA GPU Display Driver for Windows has a vulnerability related to input validation errors. This vulnerability stems from an integ...

NVIDIA HD Audio Driver code-related vulnerabilities

NVIDIA HD Audio Driver is a high-definition audio driver developed by NVIDIA Corporation. There are code vulnerabilities in the NVIDIA HD Audio Driver, specifically an issue with null pointer dereferencing, which may lead to denial-of-service attacks...

Command Injection

Overview runx is a runx - experiment manager for machine learning research Affected versions of this package are vulnerable to Command Injection in undisclosed functionality. According to the vendor, an attacker can execute arbitrary code, escalate privileges, cause denial of service, disclose...

CVE-2025-33234

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33234

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33234

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33234

The CVE-2025-33234 issue affects NVIDIA runx. A vulnerability in runx can enable code injection, with potential consequences including code execution, denial of service, privilege escalation, information disclosure, and data tampering. Root cause details indicate a local attack vector with low pr...

EUVD-2025-206385

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33234

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

PT-2026-4986

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

Security Bulletin: NVIDIA runx - January 2026

A security issue was found in NVIDIA runx: https://github.com/NVIDIA/runx during End of Support, but prior to End of Life. As a result, NVIDIA has added an End of Life notice in the README. No patch will be released. Go to NVIDIA Product Security. Details The following table summarizes the...