Nvidia Tesla vulnerabilities
132 vulnerabilities
Known vulnerabilities in Nvidia Tesla, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-33220ubuntunvidia-graphics-drivers-304+38
EPSS score0.21%
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is freed. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.CVE-2025-33221ubuntunvidia-graphics-drivers-304+41EPSS score0.18%
NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service.CVE-2025-33219debiannvidia-graphics-drivers+44EPSS score0.21%
NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wraparound. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.CVE-2025-33218nvidiageforce+3EPSS score0.21%
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.CVE-2025-33217nvidiageforce+2EPSS score0.20%
NVIDIA Display Driver for Windows contains a vulnerability where an attacker could trigger a use after free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.CVE-2025-23345debiannvidia-graphics-drivers+41EPSS score0.16%
NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure or denial of service.CVE-2025-23309nvidiageforce+2EPSS score0.18%
NVIDIA Display Driver contains a vulnerability where an uncontrolled DLL loading path might lead to arbitrary denial of service, escalation of privileges, code execution, and data tampering.CVE-2025-23332debiannvidia-graphics-drivers+42EPSS score0.14%
NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to trigger a null pointer deference. A successful exploit of this vulnerability might lead to denial of service.CVE-2025-23282debiannvidia-graphics-drivers+42EPSS score0.18%
NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.CVE-2025-23300debiannvidia-graphics-drivers+42EPSS score0.15%
NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by allocating a specific memory resource. A successful exploit of this vulnerability might lead to denial of service.CVE-2025-23347nvidiageforce+2EPSS score0.17%
NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.CVE-2025-23330debiannvidia-graphics-drivers+41EPSS score0.22%
NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.CVE-2025-23280debiannvidia-graphics-drivers+41EPSS score0.24%
NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.CVE-2020-5964nvidiageforce+5EPSS score0.35%
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure.CVE-2020-5962nvidiageforce+4EPSS score0.32%
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component, in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges.CVE-2020-5957nvidiageforce_experience+3EPSS score0.32%
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges.CVE-2020-5958nvidiageforce_experience+3EPSS score0.37%
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can plant a malicious DLL file, which may lead to code execution, denial of service, or information disclosure.CVE-2020-5967canonicalubuntu_linux+8EPSS score0.27%
NVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in which a race condition may lead to a denial of service.CVE-2020-5965nvidiageforce+4EPSS score0.35%
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver (nvwgf2um/x.dll), in which a specially crafted shader can cause an out of bounds access, leading to denial of service.CVE-2020-5963canonicalubuntu_linux+8EPSS score0.47%
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure.