CVE-2025-33206

Katalog CVE

CVSS 7.8 · High EPSS 0,92%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada nvidia nsight graphics. Skor CVSS 3.1 7.8 (High) menurut nvidia.com.

Deskripsi (NVD)

NVIDIA NSIGHT Graphics for Linux contains a vulnerability where an attacker could cause command injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and denial of service.

Rincian

Terbit di NVD

14 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber nvidia.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

0,92% peluang dieksploitasi; lebih tinggi dari 59,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://nvidia.custhelp.com/app/answers/detail/a_id/5738 patch · advisory vendor
• https://nvd.nist.gov/vuln/detail/CVE-2025-33206 pemerintah AS · vdb entry
• https://www.cve.org/CVERecord?id=CVE-2025-33206 advisory pihak ketiga