NVIDIA

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any NVIDIA product.

RSS Feeds for NVIDIA security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in NVIDIA products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by NVIDIA Sorted by Most Security Vulnerabilities since 2018

NVIDIA Geforce124 vulnerabilities

NVIDIA Tesla123 vulnerabilities

NVIDIA Virtual Gpu Manager100 vulnerabilities

NVIDIA Gpu Display Driver78 vulnerabilities

NVIDIA Triton Inference Server65 vulnerabilities

NVIDIA Nemo52 vulnerabilities

NVIDIA Cuda Toolkit44 vulnerabilities

NVIDIA Jetson22 vulnerabilities

NVIDIA Geforce Experience18 vulnerabilities

NVIDIA Megatron Lm14 vulnerabilities

NVIDIA Aistore11 vulnerabilities

NVIDIA Gpu Driver7 vulnerabilities

NVIDIA Cumulus Linux5 vulnerabilities

NVIDIA Onyx3 vulnerabilities

NVIDIA Mlnx Os3 vulnerabilities

NVIDIA Runai1 vulnerability

NVIDIA Quadro1 vulnerability

NVIDIA Skyway1 vulnerability

NVIDIA Studio1 vulnerability

NVIDIA Titan V Firmware1 vulnerability

NVIDIA Bluefield1 vulnerability

NVIDIA Cv Cuda1 vulnerability

NVIDIA Connectx1 vulnerability

NVIDIA Igx1 vulnerability

NVIDIA Isaac Lab1 vulnerability

NVIDIA Jetson Linux1 vulnerability

Nvidia Gpu Operator1 vulnerability

NVIDIA Mellanox Os1 vulnerability

NVIDIA Metrox 21 vulnerability

NVIDIA Metrox 3 Xc1 vulnerability

NVIDIA Nsight Graphics1 vulnerability

NVIDIA Nvapp1 vulnerability

NVIDIA Nvdebug Tool1 vulnerability

Nvidia App1 vulnerability

Nvidia Container Toolkit1 vulnerability

Recent NVIDIA Security Advisories

Advisory	Title	Published
5915	Security Bulletin: - NVIDIA PhysX - October 2026	October 27, 2026
5883	Security Bulletin: - NVIDIA - TensorRT LLM - October 2026	October 27, 2026
5912	Security Bulletin: NeMo Agent Toolkit - October 2026	October 27, 2026
5900	Security Bulletin: NVIDIA DALI - October 2026	October 13, 2026
5889	Security Bulletin - NVIDIA AIStore Framework - October 2026	October 13, 2026
5881	Security Bulletin - Megatron LM - October 2026	October 13, 2026
5902	Security Bulletin: NVIDIA Isaac Lab - October 2026	October 13, 2026
5890	Security Bulletin: NVSentinel - October 2026	October 13, 2026
5901	Security Bulletin: NVIDIA Warp - October 2026	October 13, 2026
5903	Security Bulletin: NVIDIA Model-Optimizer - October 2026	October 6, 2026

By the Year

In 2026 there have been 387 vulnerabilities in NVIDIA with an average score of 7.4 out of ten. Last year, in 2025 NVIDIA had 174 security vulnerabilities published. That is, 213 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.65.

Year	Vulnerabilities	Average Score
2026	387	7.39
2025	174	6.74
2024	34	6.81
2023	28	6.22
2022	43	6.70
2021	75	6.54
2020	35	6.78
2019	16	6.90
2018	7	5.50

It may take a day or so for new NVIDIA vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent NVIDIA Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-47486	Oct 27, 2026	NVIDIA PhysX OOB Write Vulnerability (CVE-2026-47486) NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, information disclosure.
CVE-2026-65145	Oct 27, 2026	Missing Auth in NVIDIA NeMo Agent Toolkit: RCE, Priv Escalation NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.	Nemo
CVE-2026-65151	Oct 27, 2026	SQL Injection in NVIDIA NeMo Agent Toolkit NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure.	Nemo
CVE-2026-65120	Oct 27, 2026	NVIDIA TensorRT-LLM SSRF Vulnerability Leading to Info Disclosure NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-24269	Oct 27, 2026	NVIDIA TensorRT-LLM SSRF Vulnerability Causing Info Disclosure NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure and data tampering.
CVE-2026-65119	Oct 27, 2026	Code Execution via Untrusted Tokenizer in NVIDIA TensorRT-LLM NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. A successful exploit might lead to code execution, information disclosure, data tampering, and denial of service.
CVE-2026-65180	Oct 13, 2026	NVIDIA MegatronLM RCE via Malicious Checkpoint File NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.	Megatron Lm
CVE-2026-65110	Oct 13, 2026	NVIDIA Megatron-LM vulnerable to RCE via malicious checkpoint loading NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.	Megatron Lm
CVE-2026-65104	Oct 13, 2026	NVIDIA Megatron-LM Cache Hash Collision Vulnerability (CVE-2026-65104) NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure.	Megatron Lm
CVE-2026-65131	Oct 13, 2026	NVSentinel gRPC Health-Event Auth Bypass via Writable Socket DoS Risk NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-65172	Oct 13, 2026	NVIDIA AIStore API Missing Auth: Unauthenticated ETL Discovery & Control NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy. A successful exploit may lead to information disclosure and unauthorized start or stop operations that affect the integrity and availability of ETL data-processing pipelines.	Aistore
CVE-2026-65164	Oct 13, 2026	NVIDIA AIStore Path Traversal in dSort Extraction NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job. A successful exploit may lead to arbitrary file creation or overwrite, code execution, information disclosure, data tampering, and denial of service.	Aistore
CVE-2026-65173	Oct 13, 2026	Missing Auth in NVIDIA AIStore Token-Revocation Data Tampering & DoS NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.	Aistore
CVE-2026-65101	Oct 13, 2026	NVIDIA AIStore SSRF via crafted external key map URL NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure.	Aistore
CVE-2026-65170	Oct 13, 2026	NVIDIA AIStore Linux HT Backend SSRF Vulnerability NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A successful exploit of this vulnerability may lead to information disclosure.	Aistore
CVE-2026-65162	Oct 13, 2026	NVIDIA AIStore Linux: Legacy ETL K8s PodSpec API RCE Vulnerability NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.	Aistore
CVE-2026-65161	Oct 13, 2026	NVIDIA AIStore Linux: Unauth Remote File Read via Promote API NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a crafted absolute source path. A successful exploit may lead to information disclosure.	Aistore
CVE-2026-65103	Oct 13, 2026	NVIDIA AIStore Path Traversal: Arbitrary File Overwrite NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, resulting in the arbitrary creation or overwrite of a file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.	Aistore
CVE-2026-67456	Oct 13, 2026	NVIDIA Warp Heap Buffer Overflow Leads to DOS NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-65148	Oct 13, 2026	NVIDIA DALI Stack Buffer Overflow Exploitable for Remote Code Exec NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.
CVE-2026-65150	Oct 13, 2026	NVIDIA DALI OOB Read Vulnerability NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to information disclosure, data tampering, and denial of service.
CVE-2026-65149	Oct 13, 2026	NVIDIA DALI OOB Write Permits DoS, Info Disclosure NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering.
CVE-2026-65147	Oct 13, 2026	NVIDIA DALI OOB Read Info Disclosure & DoS NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service.
CVE-2026-65141	Oct 13, 2026	Eval injection in NVIDIA Isaac Lab and code execution risk NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.
CVE-2026-65142	Oct 06, 2026	NVIDIA Model-Optimizer: Untrusted Deserialization Causing RCE NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.
CVE-2026-65122	Oct 06, 2026	NVIDIA TensorRT OOB Read leading to DoS NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this vulnerability may lead to denial of service.
CVE-2026-47539	Sep 30, 2026	NVIDIA vGPU KGPT numeric conversion flaw allows code exec NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect numeric conversion. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.	Virtual Gpu Manager
CVE-2026-47496	Sep 30, 2026	NVIDIA vGPU: OOB Write via RPC Enables Privilege Escalation NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC call to the host. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, and denial of service.	Virtual Gpu Manager
CVE-2026-47574	Sep 30, 2026	NVIDIA vGPU VM: Incorrect Resource Transfer Vulnerability NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability where an attacker could cause incorrect resource transfer between spheres. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.	Virtual Gpu Manager
CVE-2026-47544	Sep 30, 2026	NVIDIA vGPU Manager Linux Kernel OOB Read Vulnerability NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.	Virtual Gpu Manager
CVE-2026-47541	Sep 30, 2026	NVIDIA vGPU Manager Linux Kernel OOB Write Privilege Escalation NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.	Virtual Gpu Manager
CVE-2026-47536	Sep 30, 2026	NVIDIA vGPU vGPU Manager Kernel Mode OOB Read NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.	Virtual Gpu Manager
CVE-2026-47535	Sep 30, 2026	NVIDIA vGPU VM Linux OOB Read in Firmware Possible Priv Escalation NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.	Virtual Gpu Manager
CVE-2026-47521	Sep 30, 2026	NVIDIA vGPU Manager Linux Kernel OOB Read Vulnerability NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.	Virtual Gpu Manager
CVE-2026-47520	Sep 30, 2026	NVIDIA vGPU Virtual GPU Manager Linux Kernel OOB Read Vulnerability NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.	Virtual Gpu Manager
CVE-2026-47519	Sep 30, 2026	Out-of-Bounds Read in NVIDIA vGPU Virtual GPU Manager Kernel (CVE-2026-47519) NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.	Virtual Gpu Manager
CVE-2026-47503	Sep 30, 2026	NVIDIA vGPU Driver OOB Write in Linux VM NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest VM user may cause an out-of-bounds write by sending a crafted RPC message with invalid performance state list size parameters. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.	Virtual Gpu Manager
CVE-2026-47499	Sep 30, 2026	NVIDIA vGPU Manager OOB Read Enables PrivEsc & Code Exec NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a guest could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.	Virtual Gpu Manager
CVE-2026-47498	Sep 30, 2026	NVIDIA vGPU Manager GSP Plugin OOB Write CVE-2026-47498 NVIDIA vGPU Manager contains a vulnerability in the GPU System Processor (GSP) plugin where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC message. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.	Virtual Gpu Manager
CVE-2026-47497	Sep 30, 2026	NV Virtual GPU Manager GSP Tracing Buffer Escalation Vulnerability NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor (GSP) tracing component where a guest VM user may cause improper access by sending crafted data through a shared buffer. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.	Virtual Gpu Manager
CVE-2026-47495	Sep 30, 2026	NVIDIA vGPU Virtual GPU Manager Kernel OOB Write PrivEsc NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.	Virtual Gpu Manager
CVE-2026-47493	Sep 30, 2026	NVIDIA vGPU GPU Kernel Driver Privileged Host Resource Access Vulnerability NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.	Virtual Gpu Manager
CVE-2026-47562	Sep 30, 2026	Kernel Log Injection in NVIDIA GPU Display Driver (Linux) NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could inject crafted text into the kernel log because the supplied version string is not properly sanitized. A successful exploit of this vulnerability might lead to denial of service and data tampering.	Geforce Tesla Virtual Gpu Manager And others...
CVE-2026-47531	Sep 30, 2026	NVIDIA GPU Display Driver Null-Pointer Deref for DOS NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.	Geforce Tesla
CVE-2026-47526	Sep 30, 2026	NVIDIA GPU Display Driver Null Pointer Deref in Firmware (DoS) NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.	Geforce Tesla
CVE-2026-47604	Sep 30, 2026	Local User Info Disclosure via Missing Auth in NVIDIA GPU Display Driver NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure.	Geforce Tesla Virtual Gpu Manager And others...
CVE-2026-47603	Sep 30, 2026	Information Disclosure: NVIDIA GPU Display Driver Cross-Process Channel Read NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure.	Geforce Tesla Virtual Gpu Manager And others...
CVE-2026-47584	Sep 30, 2026	NVIDIA GPU Display Driver Windows Null Pointer Deref NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker with local access could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service.	Geforce Tesla
CVE-2026-47581	Sep 30, 2026	Kernel Locking Flaw in NVIDIA GPU Display Driver (Windows) NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where a user could cause improper locking. A successful exploit of this vulnerability might lead to denial of service.	Geforce Tesla Virtual Gpu Manager And others...
CVE-2026-47568	Sep 30, 2026	Uncontrolled Kernel Log Generation in NVIDIA GPU Display Driver (Linux) NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause uncontrolled kernel log generation by repeatedly invoking an interface that emits unrate-limited error messages. A successful exploit of this vulnerability might lead to denial of service.	Geforce Tesla Virtual Gpu Manager And others...