NVIDIA App: Local privesc
CVSS 8.8CVE-2025-23253NVIDIA / GPU stackcurated
Impact
Local privesc
Who can reach it
Local Windows user
What to do
Consumer app; no DC action
References
Related entries
- TensorRT-LLM: RCE via unsafe pickle deserializationCVE-2025-23254 · TensorRT-LLMHigh
- NVIDIA AIStore - AuthN: A flaw in the AIStore authentication component reaches privilege escalation, informationCVE-2025-33186 · NVIDIA AIStore - AuthNHigh
- NVIDIA TAO Toolkit: An uncontrolled search path loads an attacker-planted resource, reaching privilege escalationCVE-2025-33208 · NVIDIA TAO ToolkitHigh
- NVIDIA Merlin Transformers4Rec: The Trainer component deserializes untrusted data, reaching code executionCVE-2025-33213 · NVIDIA Merlin Transformers4RecHigh
- NVIDIA NVTabular: The Workflow component deserializes untrusted data, reaching code executionCVE-2025-33214 · NVIDIA NVTabularHigh
- BioNeMo Framework: Remote RCE via untrusted serializationCVE-2026-24164 · BioNeMo FrameworkHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.