NVIDIA Tesla Firmware vulnerabilities

7 CVEs affecting NVIDIA Tesla Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-5967, published 2020-06-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-5963, published 2020-06-25. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or…
CVE-2020-5958, published 2020-03-11. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can plant a malicious DLL file, which may…
CVE-2020-5965, published 2020-06-25. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver (nvwgf2um/x.dll), in which a specially crafted shader can cause an out of bounds access,…
CVE-2020-5964, published 2020-06-25. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to…
CVE-2020-5962, published 2020-06-24. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component, in which an attacker with local system access can corrupt a system file, which may…
CVE-2020-5957, published 2020-03-05. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead…
CVE-2020-5967, published 2020-06-25. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in which a race condition may lead to a denial of service.