← Vulnerability feed

Vulnerability record · CVE-2025-23352 · published 23 October 2025

CVE-2025-23352: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause …

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

7.8 CVSS 3.1 High EPSS 0.19% · top 92.7% CWE-824 · CWE-824 Deferred
7.8CVSS 3.1 base score
0.19%EPSS exploitation probability, 30 days
NoNot in CISA KEV
0Affected product versions listed by NVD
3References
17 Jun 2026Last modified by NVD

Description

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

LinkTags
https://nvd.nist.gov/vuln/detail/CVE-2025-23352
https://nvidia.custhelp.com/app/answers/detail/a_id/5703
https://www.cve.org/CVERecord?id=CVE-2025-23352

Track CVE-2025-23352 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2022-21971Windows Runtime use-after-free leads to remote code executionCVE-2022-21971 is a remote code execution flaw in the Windows Runtime component of supported Windows 10, Windows 11 and Windows Server builds. The CV…KEVEPSS 54%analysed8.8CVE-2015-1770Microsoft Office uninitialized memory use allows remote code executionMicrosoft Office 2013 SP1 and 2013 RT SP1 mishandle uninitialized memory when parsing a crafted Office document, which can lead to arbitrary code exe…KEVEPSS 35%analysed

Source: NIST National Vulnerability Database (record CVE-2025-23352), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.