Export limit exceeded: 11755 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2024-0137

nvidia-container-toolkit: Improper Isolation or Compartmentalization in NVIDIA Container Toolkit

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Nvidia
Products
Linux Kernel Container Toolkit Nvidia Container Toolkit and 1 more
CVE-2024-0136

nvidia-container-toolkit: Improper Isolation or Compartmentalization in NVIDIA Container Toolkit

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and write access to host devices. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Linux Nvidia
Products
Linux Kernel Container Toolkit Nvidia Container Toolkit and 1 more
CVE-2024-0135

nvidia-container-toolkit: Improper Isolation or Compartmentalization in NVIDIA Container Toolkit

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS 3.1 · 7.6 High EPSS 1.1% KEV · Not listed
Vendors
Linux Nvidia
Products
Linux Kernel Container Toolkit Nvidia Container Toolkit and 1 more
CVE-2025-23359

nvidia-container-toolkit: TOCTOU Vulnerability in NVIDIA Container Toolkit

NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS 3.1 · 8.3 High EPSS 3.7% KEV · Not listed
Vendors
Linux Nvidia
Products
Linux Kernel Container Toolkit Nvidia Container Toolkit and 1 more
CVE-2024-0134

nvidia-container-toolkit: specially-crafted container image can lead to the creation of unauthorized files on the host

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.

CVSS 3.1 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Nvidia
Products
Linux Kernel Nvidia Container Toolkit Nvidia Gpu Operator
CVE-2024-0132

nvidia-container-toolkit: Time-of-check Time-of-use (TOCTOU) Race Condition in NVIDIA Container toolkit

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS 3.1 · 9 Critical EPSS 40.8% KEV · Not listed
Vendors
Linux Nvidia
Products
Linux Kernel Container Toolkit Gpu Operator and 2 more
CVE-2024-0133

nvidia-container-toolkit: Data tampering in NVIDIA Container Toolkit

NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering.

CVSS 3.1 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Nvidia
Products
Linux Kernel Nvidia Container Toolkit Nvidia Gpu Operator