CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Common Log File System (CLFS) driver in Microsoft Windows allows local users to gain privileges via a crafted application, known as 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.
For NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnerability in the kernel mode layer (nvstreamkms.sys) allowing a user to cause a stack buffer overflow with specially crafted executable paths, leading to a denial of service or escalation of privileges.
The NVIDIA GPU driver for Quadro, NVS, and GeForce products contains a vulnerability in the kernel mode layer (nvlddmkm.sys) that does not validate the size of an input buffer for DxgDdiEscape ID 0x7000170. This can lead to denial of service or potential escalation of privileges.
The NVIDIA GPU driver for Quadro, NVS, and GeForce products contains a vulnerability in the kernel mode layer that allows an unvalidated value to be used as an index to an internal array. This can lead to denial of service or potential privilege escalation.
The NVIDIA GPU driver for Quadro, NVS, and GeForce products contains a vulnerability in the kernel mode layer that does not validate the size of an input buffer. This may lead to denial of service or potential escalation of privileges.
The NVIDIA Windows GPU Display Driver R340 before version 342.00 and R375 before version 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70000d5. A value passed from a user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges.
The NVIDIA GPU driver for Quadro, NVS, and GeForce products before R342.00 and R375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) that can lead to a stack buffer overflow. A value passed from a user to the driver is used without validation as the size input to memcpy().
The NVIDIA GPU driver for Quadro, NVS, and GeForce products contains a vulnerability in the kernel mode layer that allows a pointer passed from a user to be used without validation. This can lead to denial of service or potential privilege escalation.
The NVIDIA Windows GPU Display Driver for R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys). A value passed from a user to the driver is used without validation as an index to an internal array, leading to denial of service or potential escalation of privileges.
The NVIDIA GPU driver for Quadro, NVS, and GeForce products contains a vulnerability in the kernel mode layer that allows writing to kernel memory due to a missing array bounds check. This can lead to denial of service or potential privilege escalation.
The NVIDIA Windows GPU Display Driver R340 before version 342.00 and R375 before version 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) that allows an unvalidated value to be used as an index to an internal array. This can lead to denial of service or potential escalation of privileges.
The NVIDIA GPU Display Driver on Linux in versions R304 before 304.132, R340 before 340.98, R367 before 367.55, R361_93 before 361.93.03, and R370 before 370.28 contains a vulnerability in the kernel mode layer (nvidia.ko) handler for mmap(). Improper input validation may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
The NVIDIA GPU driver for Quadro, NVS, and GeForce products contains a vulnerability in the kernel mode layer (nvlddmkm.sys) that may lead to denial of service or potential privilege escalation due to a NULL pointer dereference caused by invalid user input.
The NVIDIA GPU driver for Quadro, NVS, and GeForce products contains a vulnerability in the kernel mode layer that allows an unvalidated value to be used as an index to an internal array. This can lead to denial of service or potential privilege escalation.
The NVIDIA GPU driver for Quadro, NVS, and GeForce products before version 342.00 and R375 before version 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys). A value passed from a user to the driver is used without validation as the index to an internal array, potentially leading to denial of service or privilege escalation.
The NVIDIA GPU driver for Quadro, NVS, and GeForce products contains a vulnerability in the kernel mode layer (nvlddmkm.sys) that may lead to denial of service or potential escalation of privileges due to unchecked input/output lengths in UVMLiteController Device IO Control handling.
The NVIDIA GPU driver for Quadro, NVS, and GeForce products contains a vulnerability in a memory mapping API in the kernel mode layer (nvlddmkm.sys), leading to denial of service or potential escalation of privileges.
The NVIDIA GPU Display Driver for Quadro, NVS, GeForce, and Tesla products contains a vulnerability in the kernel mode layer that allows access to arbitrary physical memory due to a missing permissions check.
The NVIDIA Windows GPU Display Driver for R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where a lack of bounds checking on user input for array indexing can lead to denial of service or potential privilege escalation.
CVE-2016-5852 vulnerability affects NVIDIA Quadro, NVS, and GeForce products, related to unquoted service paths in GFE GameStream and NVTray Plugin. Exploiting this vulnerability may allow malicious code to execute at the system/user privilege level.