CVE-2025-33220: NVIDIA Geforce

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is freed. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

Affected products

• NVIDIA Geforce
• NVIDIA Rtx Pro, Rtx, Quadro
• NVIDIA Tesla
• NVIDIA Virtual GPU Manager

Published 2026-01-28. Last modified 2026-06-17.