15255 matches found
EUVD-2026-28599
ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection in BrowserAutomation::PlaywrightService. This issue has been patched in version 1.4.1...
SUSE CVE-2016-8817
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where a value passed from a user to the driver is used without validation as the size input to memcpy, causing a buffer overflow, leading to denial of service o...
Important: Red Hat Security Advisory: kernel update
An update for kernel is now available for Red Hat Enterprise Linux for NVIDIA. A special build of the kernel packages for Red Hat Enterprise Linux for NVIDIA. CVE-2026-31431 kernel: crypto: algifaead - Revert to operating out-of-place...
RHEL 10 : kernel update (Important) (RHSA-2026:14926)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:14926 advisory. A special build of the kernel packages for Red Hat Enterprise Linux for NVIDIA. CVE-2026-31431 kernel: crypto: algifaead - Revert to operating...
Rowhammer Attack Against NVIDIA Chips
A new rowhammer attack gives complete control of NVIDIA CPUs. On Thursday, two research teams, working independently of each other, demonstrated attacks against two cards from Nvidia’s Ampere generation that take GPU rowhammering into new--and potentially much more consequential--territory: GDD...
CVE-2026-24186
NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message. A successful exploit of this vulnerability might lead to code execution...
CVE-2026-24204
NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit of this vulnerability may lead to information disclosure...
Exploit for Missing Authentication for Critical Function in Flowiseai Flowise
CVE-2026-30824 — Flowise NVIDIA NIM Authentication Bypass Chec...
Linux kernel HID driver Heap Buffer Overflow DoS
The vulnerability of the shieldallocateinputdev function in the drivers/hid/hid-nvidia-shield.c module of the Linux kernel’s input device subsystem driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
GHSA-JQP3-QRGH-4846 NVIDIA NVFlare Dashboard: Authorization bypass through user-controlled key via user management and authentication system
NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A successful exploit of this vulnerability may lead to privilege escalation, data tampering, information...
PYSEC-2026-100
NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A successful exploit of this vulnerability may lead to privilege escalation, data tampering, information...
CVE-2026-24204
NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit of this vulnerability may lead to information disclosure...
CVE-2026-24186
NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message. A successful exploit of this vulnerability might lead to code execution...
CVE-2026-24222
NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandb...
CVE-2026-24231
NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful...
CVE-2026-24231
NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful...
CVE-2026-24231
NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful...
CVE-2026-24231
NVIDIA NemoClaw is affected by CVE-2026-24231 in the validateEndpointUrl() SSRF protection pathway. A crafted endpoint URL referencing the 0.0.0.0/8 range through a blueprint configuration or CLI flag can trigger a server-side request forgery and may lead to information disclosure. The NVIDIA sec...
CVE-2026-24231
NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful...
EUVD-2026-26080
NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful...