CVE-2024-0083

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause a cross-site scripting error by network by running malicious scripts in users' browsers. A successful exploit of this vulnerability might lead to code execution, denial of service, and information disclosure.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
nvidiaChatRTX0.2 and prior versions

References

Timeline

Published
Apr 8, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-00847.8NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could execute privileged operations. CVE-2024-00857.8NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the hostCVE-2024-00865.5NVIDIA vGPU software for Linux contains a vulnerability where the software can dereference a NULL pointer. A successful exploit of this vulnCVE-2024-00878.8NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitrary file. If this fiCVE-2024-00888.1NVIDIA Triton Inference Server for Linux contains a vulnerability in shared memory APIs, where a user can cause an improper memory access isCVE-2024-00897.8NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be discCVE-2024-00907.8NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of thisCVE-2024-00917.8NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executinCVE-2024-00925.5NVIDIA GPU Driver for Windows and Linux contains a vulnerability where an improper check or improper handling of exception conditions might CVE-2024-00935.5NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorizCVE-2024-00945.5NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where an untrusted guest VM can cause improper control oCVE-2024-00957.2NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where a user can inject forged logs and executable commands by
CVE-2024-0083: Medium severity, CVSS 6.5 | Vulnix