Browse CVEs

MEDIUM 5.5 CVE-2023-0188 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged user can cause impro… Virtual Gpu 11.12 / 13.7+ Fix from $1,6002023-04-01 HIGH 7.8 CVE-2023-0182 NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of service, … Virtual Gpu 11.12 / 13.7+ Fix from $1,9502023-04-01 HIGH 7.1 CVE-2023-0180 NVIDIA GPU Display Driver for Linux contains a vulnerability in a kernel mode layer handler, which may lead to denial of service or information discl… Virtual Gpu 11.12 / 13.7+ Fix from $1,9502023-04-01 HIGH 7.1 CVE-2023-0181 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a kernel mode layer handler, where memory permissions are not correctly c… Virtual Gpu 11.12 / 13.7+ Fix from $1,9502023-04-01 HIGH 7.1 CVE-2023-0183 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an out-of-bounds write can lead to denial of service and … Virtual Gpu 11.12 / 13.7+ Fix from $1,9502023-04-01 HIGH 7.1 CVE-2023-0185 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where sign conversion issuescasting an unsigned primitive to s… Virtual Gpu 11.12 / 13.7+ Fix from $1,9502023-04-01 HIGH 7.1 CVE-2023-0186 NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of service a… Virtual Gpu 11.12 / 13.7+ Fix from $1,9502023-04-01 HIGH 7.1 CVE-2023-0208 NVIDIA DCGM for Linux contains a vulnerability in HostEngine (server component) where a user may cause a heap-based buffer overflow through the bound… Data Center Gpu Manager 3.1.7+ Fix from $1,9502023-04-01 HIGH 7.8 CVE-2022-42292 NVIDIA GeForce Experience contains a vulnerability in the NVContainer component, where a user without administrator privileges can create a symbolic … Geforce Experience 3.27.0.112+ Fix from $1,9502023-02-12 HIGH 7.3 CVE-2022-31611 NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileg… Geforce Experience 3.27.0.112+ Fix from $1,9502023-02-07 MEDIUM 5.5 CVE-2022-42291 NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently… Geforce Experience 3.27.0.112+ Fix from $1,6002023-02-07 HIGH 7.8 CVE-2022-42268 Omniverse Kit contains a vulnerability in the reference applications Create, Audio2Face, Isaac Sim, View, Code, and Machinima. These applications all… Nvidia Isaac Sim 2022.2 / 2022.2.0+ Fix from $1,9502023-01-13 HIGH 8.8 CVE-2022-42289 NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code executi… Dgx A100 Firmware 00.19.07+ Fix from $1,9502023-01-13 HIGH 8.8 CVE-2022-42290 NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code executi… Dgx A100 Firmware 00.19.07+ Fix from $1,9502023-01-13 HIGH 7.8 CVE-2022-42286 DGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of privileges. Sbios 1.18+ Fix from $1,9502023-01-13 HIGH 7.8 CVE-2022-42287 NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances… Bmc 00.19.07+ Fix from $1,9502023-01-13 MEDIUM 5.3 CVE-2022-42288 NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may … Dgx A100 Firmware 00.19.07+ Fix from $1,6002023-01-13 HIGH 8.8 CVE-2022-42279 NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code executi… Dgx A100 Firmware 00.19.07+ Fix from $1,9502023-01-13 HIGH 7.8 CVE-2022-42278 NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memory context… Bmc 00.19.07+ Fix from $1,9502023-01-13 HIGH 7.8 CVE-2022-42280 NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead to authent… Bmc 00.19.07+ Fix from $1,9502023-01-13 HIGH 7.8 CVE-2022-42283 NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain c… Bmc 00.19.07+ Fix from $1,9502023-01-13 HIGH 7.8 CVE-2022-42285 DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SPI flash protection, which may… Sbios 1.18+ Fix from $1,9502023-01-13 MEDIUM 6.7 CVE-2022-42281 NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bounds wri… Dgx A100 Firmware 1.18+ Fix from $1,6002023-01-13 MEDIUM 5.5 CVE-2022-42282 NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may lead to information disclosur… Bmc 00.19.07+ Fix from $1,6002023-01-13 MEDIUM 5.5 CVE-2022-42284 NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This may lead to a credentials exposure. Bmc 00.19.07+ Fix from $1,6002023-01-13 HIGH 8.2 CVE-2022-42276 NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which… Dgx A100 Firmware 1.18+ Fix from $1,9502023-01-13 HIGH 8.2 CVE-2022-42277 NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, wh… Dgx Station A100 Firmware 10.16+ Fix from $1,9502023-01-13 HIGH 7.8 CVE-2022-42274 NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain c… Bmc 00.19.07+ Fix from $1,9502023-01-13 HIGH 7.1 CVE-2022-42275 NVIDIA BMC IPMI handler allows an unauthenticated host to write to a host SPI flash bypassing secureboot protections. This may lead to a loss of inte… Bmc 00.19.07+ Fix from $1,9502023-01-13 HIGH 8.8 CVE-2022-42273 NVIDIA BMC contains a vulnerability in libwebsocket, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain c… Dgx A100 Firmware 00.19.07+ Fix from $1,9502023-01-12