Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-2026-24260

NVIDIA Container Toolkit: NVIDIA Container Toolkit: Privilege escalation and code execution via race condition

NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use race condition. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, and data tampering.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Nvidia
Products
Container Toolkit Gpu Operator
CVE-2025-23266

nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.

CVSS 3.1 · 9 Critical EPSS 3.3% KEV · Not listed
Vendors
Nvidia
Products
Container Toolkit
CVE-2025-23267

nvidia-container-toolkit: NVIDIA Container Toolkit Link Following Vulnerability

NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Nvidia
Products
Container Toolkit
CVE-2024-0137

nvidia-container-toolkit: Improper Isolation or Compartmentalization in NVIDIA Container Toolkit

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Nvidia
Products
Linux Kernel Container Toolkit Nvidia Container Toolkit and 1 more
CVE-2024-0136

nvidia-container-toolkit: Improper Isolation or Compartmentalization in NVIDIA Container Toolkit

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and write access to host devices. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Linux Nvidia
Products
Linux Kernel Container Toolkit Nvidia Container Toolkit and 1 more
CVE-2024-0135

nvidia-container-toolkit: Improper Isolation or Compartmentalization in NVIDIA Container Toolkit

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS 3.1 · 7.6 High EPSS 1.1% KEV · Not listed
Vendors
Linux Nvidia
Products
Linux Kernel Container Toolkit Nvidia Container Toolkit and 1 more
CVE-2025-23359

nvidia-container-toolkit: TOCTOU Vulnerability in NVIDIA Container Toolkit

NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS 3.1 · 8.3 High EPSS 3.7% KEV · Not listed
Vendors
Linux Nvidia
Products
Linux Kernel Container Toolkit Nvidia Container Toolkit and 1 more
CVE-2024-0132

nvidia-container-toolkit: Time-of-check Time-of-use (TOCTOU) Race Condition in NVIDIA Container toolkit

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS 3.1 · 9 Critical EPSS 40.8% KEV · Not listed
Vendors
Linux Nvidia
Products
Linux Kernel Container Toolkit Gpu Operator and 2 more