Nvidia Geforce vulnerabilities
131 vulnerabilities
Known vulnerabilities in Nvidia Geforce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-33220ubuntunvidia-graphics-drivers-304+38
EPSS score0.21%
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is freed. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.CVE-2025-33221ubuntunvidia-graphics-drivers-304+41EPSS score0.18%
NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service.CVE-2025-33219debiannvidia-graphics-drivers+44EPSS score0.21%
NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wraparound. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.CVE-2025-33218nvidiageforce+3EPSS score0.21%
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.CVE-2025-33217nvidiageforce+2EPSS score0.20%
NVIDIA Display Driver for Windows contains a vulnerability where an attacker could trigger a use after free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.CVE-2025-33237nvidiageforce+1EPSS score0.13%
NVIDIA HD Audio Driver for Windows contains a vulnerability where an attacker could exploit a NULL pointer dereference issue. A successful exploit of this vulnerability might lead to a denial of service.CVE-2025-23345debiannvidia-graphics-drivers+41EPSS score0.16%
NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure or denial of service.CVE-2025-23309nvidiageforce+2EPSS score0.18%
NVIDIA Display Driver contains a vulnerability where an uncontrolled DLL loading path might lead to arbitrary denial of service, escalation of privileges, code execution, and data tampering.CVE-2025-23332debiannvidia-graphics-drivers+42EPSS score0.14%
NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to trigger a null pointer deference. A successful exploit of this vulnerability might lead to denial of service.CVE-2025-23282debiannvidia-graphics-drivers+42EPSS score0.18%
NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.CVE-2025-23300debiannvidia-graphics-drivers+42EPSS score0.15%
NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by allocating a specific memory resource. A successful exploit of this vulnerability might lead to denial of service.CVE-2025-23347nvidiageforce+2EPSS score0.17%
NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.CVE-2025-23330debiannvidia-graphics-drivers+41EPSS score0.22%
NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.CVE-2025-23280debiannvidia-graphics-drivers+41EPSS score0.24%
NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.CVE-2020-5964nvidiageforce+5EPSS score0.35%
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure.CVE-2020-5962nvidiageforce+4EPSS score0.32%
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component, in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges.CVE-2020-5967canonicalubuntu_linux+8EPSS score0.27%
NVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in which a race condition may lead to a denial of service.CVE-2020-5965nvidiageforce+4EPSS score0.35%
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver (nvwgf2um/x.dll), in which a specially crafted shader can cause an out of bounds access, leading to denial of service.CVE-2020-5963canonicalubuntu_linux+8EPSS score0.47%
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure.CVE-2022-21814debiannvidia-graphics-drivers+25EPSS score0.23%
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service.