15254 matches found
CVE-2026-65088: Invocation of Process Using Visible Sensitive Information
NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-65099: Improper Neutralization of Special Elements used in an OS Command
NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...
CVE-2026-24169: Improper Neutralization of Special Elements used in a Command
NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject code by sending a specially crafted API request. A successful exploit of this vulnerability might lead to code execution, escalation of privileges and...
[SECURITY] [DLA 4752-1] nvidia-graphics-drivers new upstream security update
Debian LTS Advisory DLA-4752-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost August 24, 2026 https://wiki.debian.org/LTS Package : nvidia-graphics-drivers Version : 535.309.01-0+deb11u1 CVE ID : CVE-2022-21813 CVE-2022-21814 CVE-2022-28181 CVE-2022-28183...
[SECURITY] [DLA 4753-1] nvidia-graphics-drivers new upstream security update
Debian LTS Advisory DLA-4753-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost August 24, 2026 https://wiki.debian.org/LTS Package : nvidia-graphics-drivers Version : 535.309.01-0+deb12u1 CVE ID : CVE-2025-23280 CVE-2025-23282 CVE-2025-23300 CVE-2025-23330...
Debian dla-4753 : firmware-nvidia-gsp - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4753 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4753-1 [email protected]...
NVIDIA Megatron Bridge load_model_config Code Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the loading...
NVIDIA TensorRT ONNX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA TensorRT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ONN...
NVIDIA TensorRT ONNX File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA TensorRT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of Sli...
NVIDIA TensorRT ONNX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA TensorRT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ONN...
Debian dla-4752 : firmware-nvidia-gsp - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4752 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4752-1 [email protected]...
BUG-BOUNTY-SLM
🛡️ Bug Bounty SLM A web front end for your existing NVIDIA-SL...
USN-8669-1: Linux kernel (NVIDIA) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Null block...
USN-8669-1 linux-nvidia-6.17 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Null block...
USN-8643-3: Linux kernel (NVIDIA) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Open vSwitch; - SCTP protocol; CVE-2026-53224, CVE-2026-53246, CVE-2026-53247, CVE-2026-64531...
USN-8643-3 linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Open vSwitch; - SCTP protocol; CVE-2026-53224, CVE-2026-53246, CVE-2026-53247, CVE-2026-64531...
CVE-2026-45202
Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free even...
USN-8664-1 linux-nvidia-bos vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...
USN-8663-1 linux-nvidia, linux-nvidia-7.0 vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...