CVE-2022-21817

Affected product: NVIDIA Omniverse Launcher. Vulnerability: Cross-Origin Resource Sharing (CORS) flaw that could let an unprivileged remote attacker obtain access tokens and access resources across security domains, potentially leading to code execution and privilege escalation (per CVE-2022-2181...

CVE-2023-25524

CVE-2023-25524 affects NVIDIA Omniverse Workstation Launcher (Windows/Linux). The vulnerability is in the authentication flow where a user’s access token is displayed in the browser address bar, enabling an attacker to impersonate the user and access launcher resources, with information disclosur...