Do Son NVIDIA discloses 3 vulnerabilities in the NeMo Framework enabling remote code execution and data tampering. Update to version 25.02 to secure your AI development.
nvidia
CVE-2024-0132: This report details how an incomplete NVIDIA Container Toolkit patch allows container escape and denial-of-service (DoS) attacks, affecting AI systems and Docker on Linux
Stay secure with NVIDIA's update addressing CVE-2025-23242. Protect against potential data tampering and escalation risks.
Discover the future of technology with the Abilene data center, featuring 64,000 NVIDIA GPUs for AI advancements.
Learn about CVE-2024-0114, a high-severity vulnerability in Nvidia's Hopper HGX, risking code execution and privilege escalation.
Learn about CVE-2024-0143 and other flaws in NVIDIA's nvJPEG2000 library and how it can lead to serious security issues.
NVIDIA releases security update for Container Toolkit and GPU Operator software, addressing multiple vulnerabilities including CVE-2024-0136.
Stay informed about the latest security update for Nvidia ConnectX and BlueField DPUs. Learn about the vulnerabilities and potential risks.
Discover the growing threat of cybercriminals exploiting Extended Validation code signing certificates to deceive users and bypass security measures.
Discover the secret behind NVIDIA's AI training methods using copyrighted content. Learn how they comply with copyright law for training their AI models.
CVE-2024-0087, rated with a critical CVSS score of 9.0, allows attackers to exploit Triton Server's log configuration interface to write arbitrary files
CVE-2024-0087 is rated 9.0 on the CVSS scale, involves a vulnerability where users can redirect logging output to any file
CVE-2024-0071 and CVE-2024-0073, both rated CVSS 7.8, represent critical threats within the Windows environment
CVE-2023-31029 and CVE-2023-31030 (CVSS 9.3): Both of these vulnerabilities exist in the NVIDIA DGX A100's baseboard management controller
The most critical among them is CVE-2023-31027, which boasts a CVSS score of 8.2 out of a potential 10, indicating a high level of danger
CVE‑2023‑25528 (CVSS: 8.8) - A web server plugin flaw could cause a stack overflow, potentially leading to arbitrary code execution
CVE-2023-0189 and CVE-2023-0184 (CVSS scores of 8.8) vulnerabilities affect both Windows and Linux versions of the NVIDIA GPU Display Driver
Nvidia has released the GeForce 473.47 WHQL driver, a security update in the form of a driver that fixes various CVE vulnerabilities
hackers are not using normal software to sign, and security researchers have found multiple pieces of malware that carry Nvidia's code-signing certificate
Data monitoring site Have I Been Pwned said the hacking group stole the login credentials of 71,355 Nvidia employees.
Previously, Nvidia suffered a ransomware attack by a hacker group, and its internal systems were compromised
Nvidia has experienced a devastating cyberattack that "completely disrupted" the company's internal systems