Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.2 HIGH
CVE-2025-58772 — UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause  “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corr…

aptio_v | Memory Corruption
Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.1 HIGH
CVE-2025-58771 — UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memor…

aptio_v | Memory Corruption
Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
4.4 MEDIUM
CVE-2026-67456 — NVIDIA Warp Heap-Based Buffer Overflow

NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.

| Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.8 HIGH
CVE-2026-65180 — NVIDIA Megatron-LM Arbitrary Code Execution Vulnerability

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerabilit…

megatron-lm | Supply Chain
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.1 CRITICAL
CVE-2026-65173 — NVIDIA AIStore Missing Authentication Vulnerability

NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A success…

Remote | Authentication
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.6 HIGH
CVE-2026-65172 — NVIDIA AIStore Missing Authorization Vulnerability

NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existin…

Remote | Authorization
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.6 HIGH
CVE-2026-65170 — NVIDIA AIStore Server-Side Request Forgery

NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A …

Remote | Server-Side Request Forgery
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.1 HIGH
CVE-2026-65164 — NVIDIA AIStore Path Traversal Vulnerability

NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted direc…

Remote | Path Traversal
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
10.0 CRITICAL
CVE-2026-65162 — NVIDIA AIStore Improper Input Validation Vulnerability

NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings.…

Remote | Misconfiguration
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-65161 — NVIDIA AIStore Arbitrary File Read Vulnerability

NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a crafted absolute source pa…

Remote | Path Traversal
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.3 HIGH
CVE-2026-65150 — NVIDIA DALI Out-of-Bounds Read Vulnerability

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to information disclosure, data tampering…

data_loading_library | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.3 HIGH
CVE-2026-65149 — NVIDIA DALI Out-of-Bounds Write Vulnerability

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclos…

data_loading_library | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.3 HIGH
CVE-2026-65148 — NVIDIA DALI Stack-Based Buffer Overflow Vulnerability

NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data…

data_loading_library | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.3 HIGH
CVE-2026-65147 — NVIDIA DALI Out-of-Bounds Read Vulnerability

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of se…

data_loading_library | Information Disclosure
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.8 HIGH
CVE-2026-65141 — NVIDIA Isaac Lab Eval Injection Vulnerability

NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tamper…

isaac_lab | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
6.0 MEDIUM
CVE-2026-65131 — NVIDIA NVSentinel Authentication Bypass Vulnerability

NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authenticatio…

| Authentication
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.8 HIGH
CVE-2026-65110 — NVIDIA Megatron-LM Remote Code Execution Vulnerability

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerabi…

megatron-lm | Information Disclosure
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.1 HIGH
CVE-2026-65104 — NVIDIA Megatron-LM Cache Hash Collision Vulnerability

NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulner…

megatron-lm | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.1 HIGH
CVE-2026-65103 — NVIDIA AIStore Path Traversal Vulnerability

NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to…

Remote | Path Traversal
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.6 HIGH
CVE-2026-65101 — NVIDIA AIStore Server-Side Request Forgery

NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful…

Remote | Server-Side Request Forgery
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
Showing 20 of 15130 Results