NVIDIA GPU Display Drivers vulnerabilities

12 CVEs affecting NVIDIA GPU Display Drivers, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-23290, published 2025-08-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-23283, published 2025-08-02. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause stack buffer overflow. A successful exploit of this…
CVE-2025-23284, published 2025-08-02. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause a stack buffer overflow. A successful exploit of this vulnerability might lead to code…
CVE-2025-23278, published 2025-08-02. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted parameters. A successful exploit of this…
CVE-2025-23277, published 2025-08-02. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases. A successful…
CVE-2025-23276, published 2025-08-02. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA Installer for Windows contains a vulnerability where an attacker may be able to escalate privileges. A successful exploit of this vulnerability may lead to escalation of privileges, denial of…
CVE-2025-23281, published 2025-08-02. High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker with local unprivileged access that can win a race condition might be able to trigger a use-after-free error. A…
CVE-2025-23285, published 2025-08-02. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest to access global resources. A successful exploit of this vulnerability might lead to denial of…
CVE-2025-23287, published 2025-08-02. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may access sensitive system-level information. A successful exploit of this vulnerability may lead to Information…
CVE-2025-23290, published 2025-08-02. Low severity, CVSS 2.5. EPSS: 0.1% chance of exploitation in the next 30 days. NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a guest could get global GPU metrics which may be influenced by work in other VMs. A successful exploit of this…
CVE-2025-23286, published 2025-08-02. Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days. NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read invalid memory. A successful exploit of this vulnerability might lead to information disclosure.

Latest

CVE-2025-23288, published 2025-08-02. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may cause an exposure of sensitive system information with local unprivileged system access. A successful exploit of…
CVE-2025-23279, published 2025-08-02. High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days. NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code…