Input Validation and Logic

Every one of the 117 is a mark on the map. Named now: 1 to 26, most at risk first.

1. NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some d…CVE-2022-21820NVIDIA · CVSS 6.3 · 17% likely

   CWE-20

2. NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a…CVE-2022-28199NVIDIA · CVSS 6.5 · 2.3% likely

   CWE-1284

3. NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially…CVE-2022-21821NVIDIA · CVSS 7.8 · 2.1% likely

   CWE-1285

4. For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nv…CVE-2016-8809Nvidia · 1.6% likely

   CWE-20

5. All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscapeID 0x100008b where user provided input i…CVE-2017-0312Nvidia Corporation · 1.4% likely

   CWE-20

6. NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause an improper check for unusual or exceptional conditions issue by sending extra large payloads.…CVE-2025-33201NVIDIA · CVSS 7.5 · 1.0% likely

   CWE-754

7. NVIDIA GeForce Experience versions prior to 3.19 contains a vulnerability in the Web Helper component, in which an attacker with local system access can craft input that may not b…CVE-2019-5678NVIDIA · 0.9% likely

   CWE-20

8. NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit of…CVE-2026-65083NVIDIA · CVSS 9.9 · 0.9% likelycovered by CyberSIXT

   CWE-1841 article

9. NVIDIA DGX H100 BMC contains a vulnerability in the KVM service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code…CVE-2023-25530NVIDIA · CVSS 8 · 0.8% likely

   CWE-20

10. NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software does not validate or incorrectly validates input that can affect the control flow or data flo…CVE-2018-6267Nvidia Corporation · 0.8% likely

    CWE-20

11. NVIDIA DGX H100 BMC contains a vulnerability in the web UI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to informati…CVE-2023-25533NVIDIA · CVSS 8.3 · 0.8% likely

    CWE-20

12. NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to cod…CVE-2023-31009NVIDIA · CVSS 8.3 · 0.7% likely

    CWE-20

13. NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of p…CVE-2023-31010NVIDIA · CVSS 6.8 · 0.7% likely

    CWE-20

14. NVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper validation of specified quantity in input. A successful exploit of this vulnerabili…CVE-2025-33211NVIDIA · CVSS 7.5 · 0.7% likely

    CWE-1284

15. NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation. A successful exploit might lead to denial of service.CVE-2026-47629NVIDIA · CVSS 7.5 · 0.7% likely

    CWE-20

16. NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra software contains a vulnerability in the bootloader, where it does not validate the fields of the boot image, which may l…CVE-2019-5700Nvidia · 0.7% likely

    CWE-20

17. NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to esc…CVE-2023-31013NVIDIA · CVSS 6.1 · 0.6% likely

    CWE-20

18. NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to esca…CVE-2023-31012NVIDIA · CVSS 6.1 · 0.6% likely

    CWE-20

19. NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to esca…CVE-2023-31011NVIDIA · CVSS 5.2 · 0.6% likely

    CWE-20

20. NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution,…CVE-2023-25534NVIDIA · CVSS 5.7 · 0.6% likely

    CWE-20

21. NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pix…CVE-2026-24255NVIDIA · CVSS 7.5 · 0.5% likely

    CWE-1023

22. NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request header to the server. A successful exploit of t…CVE-2026-24175NVIDIA · CVSS 7.5 · 0.5% likely

    CWE-248

23. NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception. A successful exploit of this vulnerability might lead to denia…CVE-2026-47480NVIDIA · CVSS 7.5 · 0.5% likely

    CWE-248

24. NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. A successful exploit of this vulner…CVE-2026-24160NVIDIA · CVSS 5.5 · 0.5% likely

    CWE-690

25. NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker may cause an improper input validation issue. A successful exploit of this vulnerabil…CVE-2025-23268NVIDIA · CVSS 8 · 0.5% likely

    CWE-20

26. In NVIDIA Jetson TX1 L4T R32 version branch prior to R32.2, Tegra bootloader contains a vulnerability in nvtboot in which the nvtboot-cpu image is loaded without the load address…CVE-2019-5680NVIDIA · 0.4% likely

    CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.