Aggregates CVE and security vulnerability intelligence across all NVIDIA-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk buffer overflow and vendor risk memory corruption and related problems; some flaws may lead to vendor impact memory corruption, affecting vendor surface software deployment scenarios.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-24147 | NVIDIA Triton Inference Server contains a vulnerability in triton server where an attacker may cause an information disclosure by uploading a model configuration. A successful exploit of this vulnerability may lead to information disclosure or denial of service. | [email protected] | 4.8 | 0.48% | 2026-04-07 | 2026-06-17 |
| CVE-2026-24146 | NVIDIA Triton Inference Server contains a vulnerability where insufficient input validation and a large number of outputs could cause a server crash. A successful exploit of this vulnerability might lead to denial of service. | [email protected] | 7.5 | 0.52% | 2026-04-07 | 2026-06-17 |
| CVE-2026-24165 | NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. | [email protected] | 7.8 | 0.31% | 2026-03-31 | 2026-06-17 |
| CVE-2026-24164 | NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering. | [email protected] | 8.8 | 0.47% | 2026-03-31 | 2026-06-17 |
| CVE-2026-24154 | NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, data tampering, and information disclosure. | [email protected] | 7.6 | 0.26% | 2026-03-31 | 2026-06-17 |
| CVE-2026-24153 | NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful exploit of this vulnerability might lead to information disclosure. | [email protected] | 5.2 | 0.12% | 2026-03-31 | 2026-06-17 |
| CVE-2026-24148 | NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data tampering, and partial denial of service across devices sharing the same machine ID. | [email protected] | 8.3 | 0.35% | 2026-03-31 | 2026-06-17 |
| CVE-2026-24159 | NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. | [email protected] | 7.8 | 0.64% | 2026-03-24 | 2026-06-17 |
| CVE-2026-24158 | NVIDIA Triton Inference Server contains a vulnerability in the HTTP endpoint where an attacker may cause a denial of service by providing a large compressed payload. A successful exploit of this vulnerability may lead to denial of service. | [email protected] | 7.5 | 0.40% | 2026-03-24 | 2026-06-17 |
| CVE-2026-24157 | NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering. | [email protected] | 7.8 | 0.64% | 2026-03-24 | 2026-06-17 |
| CVE-2026-24152 | NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering. | [email protected] | 7.8 | 0.21% | 2026-03-24 | 2026-06-17 |
| CVE-2026-24151 | NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to load a maliciously crafted input. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering. | [email protected] | 7.8 | 0.21% | 2026-03-24 | 2026-06-17 |
| CVE-2026-24150 | NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering. | [email protected] | 7.8 | 0.21% | 2026-03-24 | 2026-06-17 |
| CVE-2025-33254 | NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause internal state corruption. A successful exploit of this vulnerability may lead to a denial of service. | [email protected] | 7.5 | 0.32% | 2026-03-24 | 2026-06-17 |
| CVE-2025-33248 | NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering. | [email protected] | 7.8 | 0.21% | 2026-03-24 | 2026-06-17 |
| CVE-2025-33247 | NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. | [email protected] | 7.8 | 0.32% | 2026-03-24 | 2026-06-17 |
| CVE-2025-33238 | NVIDIA Triton Inference Server Sagemaker HTTP server contains a vulnerability where an attacker may cause an exception. A successful exploit of this vulnerability may lead to denial of service. | [email protected] | 7.5 | 0.32% | 2026-03-24 | 2026-06-17 |
| CVE-2026-24241 | NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue. A successful exploit of this vulnerability might lead to information disclosure. | [email protected] | 4.3 | 0.56% | 2026-02-24 | 2026-06-17 |
| CVE-2025-33181 | NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges. | [email protected] | 7.3 | 0.35% | 2026-02-24 | 2026-06-17 |
| CVE-2025-33180 | NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges. | [email protected] | 8.0 | 0.76% | 2026-02-24 | 2026-06-17 |