HIGH🇵🇱 Wersja polska

CVE-2024-0090

CVSS 7.8v3.1pub. 2024-06-13upd. 2024-11-21

NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • Canonical Ubuntu

    OS
    Canonical
    all versions
  • Citrix Hypervisor

    OS
    Citrix
    all versions
  • Linux Kernel

    OS
    Linux
    all versions
  • Microsoft Azure Stack Hci

    APP
    Microsoft
    all versions
  • Microsoft Windows

    OS
    Microsoft
    all versions
  • Nvidia Cloud Gaming

    APP
    Nvidia
    < 555.99< 555.52.04
  • Nvidia Geforce

    APP
    Nvidia
    all versions
  • Nvidia Gpu Display Driver

    APP
    Nvidia
    555 – 555.52.04 (excl.)535 – 538.67 (excl.)550 – 552.55 (excl.)555 – 555.99 (excl.)470 – 470.256.02 (excl.)535 – 535.180.01 (excl.)550 – 550.90.07 (excl.)470 – 475.06 (excl.)
  • Nvidia Nvs

    APP
    Nvidia
    all versions
  • Nvidia Quadro

    APP
    Nvidia
    all versions
  • Nvidia Rtx

    APP
    Nvidia
    all versions
  • Nvidia Studio

    APP
    Nvidia
    all versions
  • Nvidia Tesla

    APP
    Nvidia
    all versions
  • Nvidia Virtual Gpu

    APP
    Nvidia
    17.0 – 17.2 (excl.)14.0 – 16.6 (excl.)< 13.11< 17.2
  • Red Hat Enterprise Linux Kernel Based Virtual Machine

    OS
    Redhat
    all versions
  • VMware vSphere

    OS
    Vmware
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEDoSMemory
CWE
References

Related vulnerabilities

CVE-2026-8398CRITICAL9.3⚠ KEVPL ✓same product

Atak na łańcuch dostaw DAEMON Tools Lite — trojanizacja instalatorów

CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓same product

Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2025-34028CRITICAL9.3⚠ KEVPL ✓same product

Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP

CVE-2024-7262CRITICAL9.3⚠ KEVPL ✓same product

Path Traversal w Kingsoft WPS Office — ładowanie dowolnej biblioteki Windows