Skip to content

NVIDIA · weakness class

File and Path Handling

64 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
1

Every one of the 64 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. CVECVE-2024-0087nvidia · CVSS 9 · 20% likely

    CWE-73

  2. NVIDIA GeForce Experience 3.x before GFE 3.1.0.52 contains a vulnerability in NVIDIA Web Helper.exe where a local web API endpoint, /VisualOPS/v.1.0./, lacks proper access control…CVE-2016-8827Nvidia Corporation · 5.3% likely

    CWE-22

  3. NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of se…CVE-2026-24208NVIDIA · CVSS 5.3 · 4.9% likely

    CWE-22

  4. NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated pe…CVE-2025-23266NVIDIA · CVSS 9 · 3.3% likely

    CWE-426

  5. NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which software allows an attacker to upload or transf…CVE-2020-11486NVIDIA · 2.7% likely

    CWE-434

  6. NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates a hard link, the sof…CVE-2019-5674NVIDIA Corporation · 1.2% likely

    CWE-59

  7. NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously…CVE-2025-23304NVIDIA · CVSS 7.8 · 1.2% likely

    CWE-22

  8. NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A succe…CVE-2024-0113NVIDIA · CVSS 7.5 · 1.1% likely

    CWE-35

  9. NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in the local service provider component in which an attacker wit…CVE-2019-5695NVIDIA · 0.9% likely

    CWE-427

  10. NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitat…CVE-2026-65103NVIDIA · CVSS 8.1 · 0.9% likely

    CWE-22

  11. NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted contain…CVE-2025-23267NVIDIA · CVSS 8.5 · 0.9% likely

    CWE-59

  12. CVECVE-2023-31036nvidia · CVSS 7.5 · 0.9% likely

    CWE-23

  13. NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successf…CVE-2026-47612NVIDIA · CVSS 7.5 · 0.8% likely

    CWE-22

  14. The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to write files to restricted components. A successful exploit of this vulnerability may lead to informatio…CVE-2025-23343NVIDIA · CVSS 7.6 · 0.8% likely

    CWE-22

  15. NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname t…CVE-2026-65164NVIDIA · CVSS 8.1 · 0.8% likely

    CWE-22

  16. NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escala…CVE-2026-65093NVIDIA · CVSS 9.9 · 0.8% likelycovered by CyberSIXT

    CWE-4271 article

  17. NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file. A successful exploit of this vulnerability might lead…CVE-2026-24217NVIDIA · CVSS 8.8 · 0.8% likely

    CWE-29

  18. NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution and i…CVE-2026-47606NVIDIA · CVSS 6.5 · 0.7% likely

    CWE-36

  19. NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lead to denial of service.CVE-2026-47627NVIDIA · CVSS 9.8 · 0.7% likelycovered by CyberSIXT

    CWE-221 article

  20. CVECVE-2024-0100nvidia · CVSS 6.5 · 0.7% likely

    CWE-73

  21. NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a crafte…CVE-2026-65161NVIDIA · CVSS 7.5 · 0.7% likely

    CWE-22

  22. NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of se…CVE-2026-24209NVIDIA · CVSS 7.5 · 0.7% likely

    CWE-22

  23. NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successfu…CVE-2025-23250NVIDIA · CVSS 7.6 · 0.6% likely

    CWE-22

  24. NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerabi…CVE-2026-65092NVIDIA · CVSS 8.5 · 0.6% likely

    CWE-22

  25. NVIDIA Windows GPU Display Driver, R390 driver version, contains a vulnerability in NVIDIA Control Panel in which it incorrectly loads Windows system DLLs without validating the p…CVE-2019-5694NVIDIA · 0.6% likely

    CWE-427

  26. NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause external control of a file name or path. A successful exploit of this vulnerabili…CVE-2026-65125NVIDIA · CVSS 6.6 · 0.6% likely

    CWE-73

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.