Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-23269 State: PUBLISHED Published: 2025-07-17T20:14:21.557Z Last Updated: 2025-07-17T20:28:55.762Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: NVIDIA Products: Jetson Orin and Xavier Devices Problem Types: CWE-1423 Description: NVIDIA Jetson Linux contains a vulnerability in the kernel where an attacker may cause an exposure of sensitive information due to a shared microarchitectural predictor state that influences transient execution. A successful exploit of this vulnerability may lead to information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5662
CVE ID: CVE-2025-23270 State: PUBLISHED Published: 2025-07-17T19:59:24.528Z Last Updated: 2025-07-17T20:21:39.590Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: Jetson Orin, IGX Orin and Xavier Devices Problem Types: CWE-392 Description: NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local attacker may cause exposure of sensitive information via a side channel vulnerability. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.c
, and information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5662
CVE ID: CVE-2025-23271 State: PUBLISHED Published: 2025-09-24T13:11:48.949Z Last Updated: 2025-11-03T18:08:45.185Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-125 Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23271 - https://www.cve.org/CVERecord?id=
CVE Program Container: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23271 - https://www.cve.org/CVERecord?id=CVE-2025-23271 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
CVE ID: CVE-2025-23272 State: PUBLISHED Published: 2025-09-24T13:11:59.673Z Last Updated: 2025-09-24T18:44:17.110Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit, nvJPEG Problem Types: CWE-125 Description: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23272 - https://www.cve.org/CVERecord?id=CVE-2025-23272 - https://nvidia.
s: - https://nvd.nist.gov/vuln/detail/CVE-2025-23272 - https://www.cve.org/CVERecord?id=CVE-2025-23272 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
CVE ID: CVE-2025-23273 State: PUBLISHED Published: 2025-09-24T13:12:11.050Z Last Updated: 2025-09-24T18:44:44.602Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit, nvJPEG Problem Types: CWE-369 Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a divide by zero error by submitting a specially crafted JPEG file. A successful exploit of this vulnerability may lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23273 - https://www.cve.org/CVERecord?id=CVE-2025-23273 - ht
nt: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23273 - https://www.cve.org/CVERecord?id=CVE-2025-23273 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
CVE ID: CVE-2025-23274 State: PUBLISHED Published: 2025-09-24T13:12:19.823Z Last Updated: 2025-09-24T18:45:23.273Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit, nvJPEG Problem Types: CWE-125 Description: NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23274 - https://www
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23274 - https://www.cve.org/CVERecord?id=CVE-2025-23274 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
CVE ID: CVE-2025-23275 State: PUBLISHED Published: 2025-09-24T13:12:29.449Z Last Updated: 2025-09-24T14:11:54.046Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit, nvJPEG Problem Types: CWE-787 Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a GPU out-of-bounds write by providing certain image dimensions. A successful exploit of this vulnerability may lead to denial of service and information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23275 - https://www.cve.org/CVERe
otes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23275 - https://www.cve.org/CVERecord?id=CVE-2025-23275 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
CVE ID: CVE-2025-23276 State: PUBLISHED Published: 2025-08-02T22:01:47.735Z Last Updated: 2025-08-05T03:56:17.832Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Drivers Problem Types: CWE-552 Description: NVIDIA Installer for Windows contains a vulnerability where an attacker may be able to escalate privileges. A successful exploit of this vulnerability may lead to escalation of privileges, denial of service, code execution, information disclosure and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5670
CVE ID: CVE-2025-23277 State: PUBLISHED Published: 2025-08-02T22:03:56.696Z Last Updated: 2025-08-05T03:56:22.176Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: GPU Display Drivers Problem Types: CWE-284 Description: NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases. A successful exploit of this vulnerability might lead to denial of service, data tampering, or information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://https://nvidia.custhelp.com/app/answers/detail/a_id/5670
CVE ID: CVE-2025-23278 State: PUBLISHED Published: 2025-08-02T22:05:26.185Z Last Updated: 2025-08-04T13:31:13.583Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: NVIDIA Products: GPU Display Drivers Problem Types: CWE-129 Description: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted parameters. A successful exploit of this vulnerability might lead to data tampering or denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5670
CVE ID: CVE-2025-23279 State: PUBLISHED Published: 2025-08-02T22:06:27.048Z Last Updated: 2025-08-05T03:56:29.456Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: GPU Display Drivers Problem Types: CWE-367 Description: NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, denial of service, or data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5670
CVE ID: CVE-2025-23280 State: PUBLISHED Published: 2025-10-10T17:41:13.886Z Last Updated: 2025-10-22T03:55:20.266Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: GeForce, NVIDIA RTX, Quadro, NVS, Tesla, Guest driver Problem Types: CWE-416 Description: NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23280 - https://www.cve.or
alyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23280 - https://www.cve.org/CVERecord?id=CVE-2025-23280 - https://nvidia.custhelp.com/app/answers/detail/a_id/5703
CVE ID: CVE-2025-23281 State: PUBLISHED Published: 2025-08-02T22:07:47.139Z Last Updated: 2025-08-05T03:56:33.516Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: GPU Display Drivers Problem Types: CWE-416 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker with local unprivileged access that can win a race condition might be able to trigger a use-after-free error. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.cu
f service, or information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5670
CVE ID: CVE-2025-23282 State: PUBLISHED Published: 2025-10-10T17:41:55.131Z Last Updated: 2025-10-22T03:55:19.092Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: Virtual GPU Manager, GeForce, NVIDIA RTX, Quadro, NVS, Tesla, Guest driver Problem Types: CWE-415 Description: NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nis
of service, and information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23282 - https://www.cve.org/CVERecord?id=CVE-2025-23282 - https://nvidia.custhelp.com/app/answers/detail/a_id/5703
CVE ID: CVE-2025-23283 State: PUBLISHED Published: 2025-08-02T22:13:17.132Z Last Updated: 2025-08-05T03:56:37.658Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: GPU Display Drivers Problem Types: CWE-121 Description: NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause stack buffer overflow. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detai
ampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5670
CVE ID: CVE-2025-23284 State: PUBLISHED Published: 2025-08-02T22:16:50.073Z Last Updated: 2025-08-05T03:56:38.825Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: GPU Display Drivers Problem Types: CWE-121 Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause a stack buffer overflow. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, or data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5670
CVE ID: CVE-2025-23285 State: PUBLISHED Published: 2025-08-02T22:17:50.831Z Last Updated: 2025-08-04T13:31:37.107Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: GPU Display Drivers Problem Types: CWE-732 Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest to access global resources. A successful exploit of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5670
CVE ID: CVE-2025-23286 State: PUBLISHED Published: 2025-08-02T22:09:12.667Z Last Updated: 2025-08-04T13:36:56.791Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: NVIDIA Products: GPU Display Drivers Problem Types: CWE-125 Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read invalid memory. A successful exploit of this vulnerability might lead to information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5670
CVE ID: CVE-2025-23287 State: PUBLISHED Published: 2025-08-02T22:10:01.037Z Last Updated: 2025-08-04T13:36:38.245Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: NVIDIA Products: GPU Display Drivers Problem Types: CWE-497 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may access sensitive system-level information. A successful exploit of this vulnerability may lead to Information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5670
CVE ID: CVE-2025-23288 State: PUBLISHED Published: 2025-08-02T22:10:33.765Z Last Updated: 2025-08-04T13:31:58.293Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: NVIDIA Products: GPU Display Drivers Problem Types: CWE-497 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may cause an exposure of sensitive system information with local unprivileged system access. A successful exploit of this vulnerability may lead to Information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5670
CVE ID: CVE-2025-23289 State: PUBLISHED Published: 2025-07-31T20:41:51.159Z Last Updated: 2025-08-01T13:27:25.634Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: NVIDIA Products: NVIDIA Omniverse Launcher Problem Types: CWE-532 Description: NVIDIA Omniverse Launcher for Windows and Linux contains a vulnerability in the launcher logs, where a user could cause sensitive information to be written to the log files through proxy servers. A successful exploit of this vulnerability might lead to information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5679
CVE ID: CVE-2025-23290 State: PUBLISHED Published: 2025-08-02T22:18:49.085Z Last Updated: 2025-08-04T13:29:00.959Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: NVIDIA Products: GPU Display Drivers Problem Types: CWE-200 Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a guest could get global GPU metrics which may be influenced by work in other VMs. A successful exploit of this vulnerability might lead to information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5670
CVE ID: CVE-2025-23291 State: PUBLISHED Published: 2025-09-30T17:54:22.801Z Last Updated: 2025-09-30T20:33:10.103Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:N) Vendors: NVIDIA Products: DLS component of NVIDIA License System Problem Types: CWE-312 Description: NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized action. A successful exploit of this vulnerability may lead to information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23291 - https://www.cve.org/CVERecord?id=CVE-2025-23291 - https://nvidia.custhelp.com
/nvd.nist.gov/vuln/detail/CVE-2025-23291 - https://www.cve.org/CVERecord?id=CVE-2025-23291 - https://nvidia.custhelp.com/app/answers/detail/a_id/5705
CVE ID: CVE-2025-23292 State: PUBLISHED Published: 2025-09-30T17:55:02.678Z Last Updated: 2025-09-30T20:33:31.040Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:L) Vendors: NVIDIA Products: DLS component of NVIDIA License System Problem Types: CWE-943 Description: NVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection vulnerability where an User/Attacker may cause an authorized action. A successful exploit of this vulnerability may lead to partial denial of service (UI component). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23292 - https://www.cve.org/CVERecord?id=CVE-2025-
Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23292 - https://www.cve.org/CVERecord?id=CVE-2025-23292 - https://nvidia.custhelp.com/app/answers/detail/a_id/5705
CVE ID: CVE-2025-23293 State: PUBLISHED Published: 2025-09-30T17:55:29.157Z Last Updated: 2025-09-30T20:33:39.011Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: NVIDIA Products: DLS component of NVIDIA License System Problem Types: CWE-306 Description: NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized action. A successful exploit of this vulnerability may lead to information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23293 - https://www.cve.org/CVERecord?id=CVE-2025-23293 - https://nvidia.custhelp.co
//nvd.nist.gov/vuln/detail/CVE-2025-23293 - https://www.cve.org/CVERecord?id=CVE-2025-23293 - https://nvidia.custhelp.com/app/answers/detail/a_id/5705
CVE ID: CVE-2025-23294 State: PUBLISHED Published: 2025-08-13T17:08:13.453Z Last Updated: 2025-08-13T17:49:03.240Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA WebDataset Problem Types: CWE-78 Description: NVIDIA WebDataset for all platforms contains a vulnerability where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23294 - https://www.cve.org/CVERecord?id=CVE-20
DP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23294 - https://www.cve.org/CVERecord?id=CVE-2025-23294 - https://nvidia.custhelp.com/app/answers/detail/a_id/5658
CVE ID: CVE-2025-23295 State: PUBLISHED Published: 2025-08-13T17:19:54.303Z Last Updated: 2025-08-15T03:55:53.489Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA Apex Problem Types: CWE-94 Description: NVIDIA Apex for all platforms contains a vulnerability in a Python component where an attacker could cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23295 - https://www.cve.org/CV
t Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23295 - https://www.cve.org/CVERecord?id=CVE-2025-23295 - https://nvidia.custhelp.com/app/answers/detail/a_id/5680
CVE ID: CVE-2025-23296 State: PUBLISHED Published: 2025-08-13T17:25:50.214Z Last Updated: 2025-08-13T18:17:41.459Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA Isaac-GR00T N1 Problem Types: CWE-94 Description: NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23296 - https://www.cve.org/CVERecord?id=CV
SA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23296 - https://www.cve.org/CVERecord?id=CVE-2025-23296 - https://nvidia.custhelp.com/app/answers/detail/a_id/5681
CVE ID: CVE-2025-23297 State: PUBLISHED Published: 2025-10-01T21:19:43.799Z Last Updated: 2025-10-02T15:53:50.640Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA App Problem Types: CWE-276 Description: NVIDIA Installer for NvAPP for Windows contains a vulnerability in the FrameviewSDK installation process, where an attacker with local unprivileged access could modify files in the Frameview SDK directory. A successful exploit of this vulnerability might lead to escalation of privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23297 - https://www.cve.org/CVERecord?id=CVE-
ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23297 - https://www.cve.org/CVERecord?id=CVE-2025-23297 - https://nvidia.custhelp.com/app/answers/detail/a_id/5682
CVE ID: CVE-2025-23298 State: PUBLISHED Published: 2025-08-13T17:28:53.506Z Last Updated: 2025-08-13T18:05:43.018Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA Merlin Transformers4Rec Problem Types: CWE-94 Description: NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability in a python dependency, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23298 - https://www.
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23298 - https://www.cve.org/CVERecord?id=CVE-2025-23298 - https://nvidia.custhelp.com/app/answers/detail/a_id/5683
CVE ID: CVE-2025-23299 State: PUBLISHED Published: 2025-10-22T15:14:10.015Z Last Updated: 2025-10-22T17:54:09.412Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: BlueField GA, BlueField LTS22, BlueField LTS23, BlueField LTS24, ConnectX GA, ConnectX LTS22, ConnectX LTS23, ConnectX LTS24, ConnectX-4 LX Problem Types: CWE-787 Description: NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23299 - https://www.cve.org/CVER