LIVE · cybersecurity feed
Live wire
vendor

Nvidia

103 CVEs published in the last four months and 3 stories. Exploited flaws first.

Critical5
High98
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-650839.9criticalopenshellNVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause57d ago
CVE-2026-650939.9criticalopenshellNVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape.57d ago
CVE-2026-476279.8criticaltriton inference serverNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal.64d ago
CVE-2026-242079.8criticaltriton inference serverNVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass.155d ago
CVE-2026-242549.8criticaldynamoNVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause78d ago
CVE-2026-241878.8highgpu display driverNVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free.148d ago
CVE-2026-650918.8highopenshellNVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injec57d ago
CVE-2026-242178.8highbionemo frameworkNVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a mali154d ago
CVE-2026-650928.5highopenshellNVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass 57d ago
CVE-2026-476238.2highdynamoNVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data.78d ago
CVE-2026-241888.2hightensorrtNVIDIA TensorRT contains a vulnerability where an attacker could cause an out-of-bounds write.154d ago
CVE-2026-242538.2highdynamoNVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write.78d ago
CVE-2026-650848.1highnemoclawNVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improp57d ago
CVE-2026-650818.1highnemoclawNVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause exec57d ago
CVE-2026-242188.1highdgx osNVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image caus154d ago
CVE-2026-651058.1highnemoclawNVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may acce57d ago
CVE-2026-650988.1highnemoclawNVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could c57d ago
CVE-2026-242138hightriton inference serverNVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-o155d ago
CVE-2026-242148hightriton inference serverNVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integ155d ago
CVE-2026-242487.8highnemo megatron bridgeNVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of code g112d ago
CVE-2026-242497.8highnemo megatron bridgeNVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust112d ago
CVE-2026-242507.8highnemo megatron bridgeNVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper validation of all112d ago
CVE-2026-242517.8highnemo megatron bridgeNVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynami112d ago
CVE-2026-242387.8hightensorrtNVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index.99d ago
CVE-2026-242687.8hightensorrtNVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow.99d ago
CVE-2026-242727.8hightensorrtNVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer.99d ago
CVE-2026-242527.8highnemoNVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection.86d ago
CVE-2026-617797.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-242167.8highbionemo frameworkNVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data.154d ago
CVE-2026-241627.8hightransformers4recNVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization 148d ago
CVE-2026-241907.8highgpu display driverNVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could 148d ago
CVE-2026-241917.8highgpu display driverNVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-u148d ago
CVE-2026-241927.8highgpu display driverNVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion bet148d ago
CVE-2026-241937.8highgpu display driverNVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bound148d ago
CVE-2026-241947.8highgpu display driverNVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause 148d ago
CVE-2026-242217.8highnvtabularNVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data141d ago
CVE-2026-242377.8highnvtabularNVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data141d ago
CVE-2026-241557.8highnemoNVIDIA NeMo Framework for all platforms contains a code injection vulnerability.127d ago
CVE-2026-242287.8highnemoNVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted 127d ago
CVE-2026-242407.8highnemo megatron bridgeNVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust112d ago
CVE-2026-242427.8highnemo megatron bridgeNVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forger112d ago
CVE-2026-242437.8highnemo megatron bridgeNVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust112d ago
CVE-2026-242447.8highnemo megatron bridgeNVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust112d ago
CVE-2026-242457.8highnemo megatron bridgeNVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust112d ago
CVE-2026-242467.8highnemo megatron bridgeNVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynami112d ago
CVE-2026-242477.8highnemo megatron bridgeNVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust112d ago
CVE-2026-617567.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617577.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617587.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617597.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617607.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617617.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617627.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617637.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617647.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617657.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617667.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617677.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617687.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617697.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617707.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617717.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617727.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617737.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617747.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617757.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617767.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617777.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617787.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-241837.8highcumulus linuxNVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could u64d ago
CVE-2026-650897.8highnemoclawNVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could57d ago
CVE-2026-650907.8highnemoclawNVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause 57d ago
CVE-2026-650967.8highnemoclawNVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause57d ago
CVE-2026-650997.8highnemoclawNVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS57d ago
CVE-2026-617507.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617517.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617527.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617537.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617547.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2026-617557.8highnemo megatron bridgeNVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.50d ago
CVE-2025-332557.5hightensorrt llmNVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe de155d ago
CVE-2026-476137.5highdynamoNVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to 78d ago
CVE-2026-476147.5highdynamoNVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery.78d ago
CVE-2026-476157.5highdynamoNVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supply78d ago
CVE-2026-476167.5highdynamoNVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause serve78d ago
CVE-2026-476177.5highdynamoNVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause serve78d ago
CVE-2026-476187.5highdynamoNVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could caus78d ago
CVE-2026-242557.5highdynamoNVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause 78d ago
CVE-2026-650977.5highnemoclawNVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a do57d ago
CVE-2026-241847.5highcumulus linuxNVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon component, where 64d ago
CVE-2026-474767.5hightriton inference serverNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resourc99d ago
CVE-2026-476287.5hightriton inference serverNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of r64d ago
CVE-2026-476297.5hightriton inference serverNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input val64d ago
CVE-2026-242647.5hightriton inference serverNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improper handling of112d ago
CVE-2026-241637.5hightensorrt llmNVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe d155d ago
CVE-2026-242107.5hightriton inference serverNVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflow.155d ago
CVE-2026-242097.5hightriton inference serverNVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue.155d ago
CVE-2026-476127.5highdynamoNVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improp78d ago
CVE-2026-242127.5highisaac launchableNVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear tex148d ago
CVE-2026-242067.3hightriton inference serverNVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass.155d ago

Filter the full tracker by Nvidia →

Our coverage of Nvidia

security

Californian accused of shipping $300M worth of Nvidia chips to China without Uncle Sam’s approval

A California business owner has been arrested and charged with allegedly orchestrating a scheme to smuggle approximately $300 million worth of advanced Nvidia graphics processing units (GPUs) and related server equipment to China, in violation of U.S. export controls. The U.S. government has prioritized restricting the sale of high-end AI hardware to China, citing national security concerns…

security

New GPUThor attack defeats NVIDIA ECC protection for root access

A newly identified Rowhammer attack, dubbed GPUThor, has been shown to bypass error-correcting code (ECC) protections on NVIDIA GPUs, potentially leading to denial-of-service (DoS) conditions and root-level privilege escalation. Researchers from the University of Toronto demonstrated the attack against NVIDIA Ampere-class workstation GPUs utilizing GDDR6 memory, including the RTX A4000, RTX…

CVE-2024-28224high

A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

A recent report indicates a significant vulnerability within NVIDIA NemoClaw that could enable a malicious webpage to compromise a local AI agent. The core of the issue lies in the ability of an attacker to modify the AI model's chat template, effectively injecting hidden instructions that would then influence all subsequent interactions with the model. This form of "poisoning" could lead to…