CVE-2025-33221

MediumCVSS 6.0/10Last modified Jul 24, 2026

Description

NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service.

Metrics

CVSS 3.1 6.0/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
NVIDIAGeForceAll driver versions prior to 595.71.05
NVIDIAGeForceAll driver versions prior to 580.159.03
NVIDIAGeForceAll driver versions prior to 535.309.01
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 595.71.05
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 580.159.03
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 535.309.01
NVIDIATeslaAll driver versions prior to 595.71.05
NVIDIATeslaAll driver versions prior to 580.159.03
NVIDIATeslaAll driver versions prior to 535.309.01
NVIDIAGuest driver595.58.03(All versions prior to and including vGPU 20.0)
NVIDIAGuest driver580.126.09(All versions prior to and including vGPU 19.4)
NVIDIAGuest driver535.288.01(All versions prior to and including vGPU 16.13)
NVIDIAGuest driver595.58.03(All versions up to and including the March 2026 release)
NVIDIAGeForceAll driver versions prior to 596.36
NVIDIAGeForceAll driver versions prior to 582.53 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 596.36
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 582.53
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 539.72
NVIDIATeslaAll driver versions prior to 596.36
NVIDIATeslaAll driver versions prior to 582.53
NVIDIATeslaAll driver versions prior to 539.72
NVIDIAGuest driver595.97(All versions prior to and including vGPU 20.0)
NVIDIAGuest driver582.16(All versions prior to and including vGPU 19.4)
NVIDIAGuest driver539.64(All versions prior to and including vGPU 16.13)

References

Timeline

Published
May 26, 2026
Last modified
Jul 24, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-332229.8NVIDIA Isaac Launchable contains a vulnerability where an attacker could exploit a hard-coded credential issue. A successful exploit of thisCVE-2025-332239.8NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges. A successful exploiCVE-2025-332249.8NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges. A successful exploiCVE-2025-332258.4NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names.CVE-2025-332267.8NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection. A sCVE-2025-332287.3NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could cause an OS command injection by supplyingCVE-2025-332297.3NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the samCVE-2025-33238.8A vulnerability classified as critical was found in godcheese/code-projects Nimrod 0.8. Affected by this vulnerability is the function searcCVE-2025-332307.3NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supCVE-2025-332316.7NVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading mechanism where an attacker could cause an unconCVE-2025-332337.8NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection. A successful exploitCVE-2025-332347.8NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead t