CVE-2024-0082

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause improper privilege management by sending open file requests to the application. A successful exploit of this vulnerability might lead to local escalation of privileges, information disclosure, and data tampering

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

VendorProductVersions
nvidiaChatRTX0.2 and prior versions
nvidiachatrtx<= 0.2

References

Timeline

Published
Apr 8, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-00836.5NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause a cross-site scripting error by network by runninCVE-2024-00847.8NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could execute privileged operations. CVE-2024-00857.8NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the hostCVE-2024-00865.5NVIDIA vGPU software for Linux contains a vulnerability where the software can dereference a NULL pointer. A successful exploit of this vulnCVE-2024-00878.8NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitrary file. If this fiCVE-2024-00888.1NVIDIA Triton Inference Server for Linux contains a vulnerability in shared memory APIs, where a user can cause an improper memory access isCVE-2024-00897.8NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be discCVE-2024-00907.8NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of thisCVE-2024-00917.8NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executinCVE-2024-00925.5NVIDIA GPU Driver for Windows and Linux contains a vulnerability where an improper check or improper handling of exception conditions might CVE-2024-00935.5NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorizCVE-2024-00945.5NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where an untrusted guest VM can cause improper control o
CVE-2024-0082: High severity, CVSS 8.2 | Vulnix