CVE-2025-23352: NVIDIA Virtual GPU Manager

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected products

• NVIDIA Virtual GPU Manager

Published 2025-10-23. Last modified 2026-10-08.